Mmastodon TechnologyCybersecurity first seen 10 h ago, last 10 h ago, peak #7

Oracle PeopleSoft flaw mass-exploited by ShinyHunters

Original: 🤖 Oracle PeopleSoft CVE-2026-35273 (CVSS 9.8, unauthenticated RCE) is being mass-exploited again by ShinyHunters. Attack

Attackers are mass-exploiting a critical Oracle PeopleSoft vulnerability, CVE-2026-35273, rated CVSS 9.8 as an unauthenticated remote code execution flaw. The ShinyHunters group is reportedly using URL-encoding tricks to bypass WAF rules before deploying web shells. Google has warned of global targeting across multiple sectors, and renewed exploitation waves are drawing fresh attention from security teams.

Why now: Renewed mass exploitation of a critical, remotely exploitable Oracle flaw is prompting urgent warnings and patching efforts worldwide.

OraclePeopleSoftShinyHuntersGoogle

Open on mastodon →

Evidence

• 🤖 Oracle PeopleSoft CVE-2026-35273 (CVSS 9.8, unauthenticated RCE) is being mass-exploited again by ShinyHunters. Attackers use URL-encoding tricks to bypass WAF rules meant to block the flaw, then drop web shells. Google warns of global multi-sector targeting. 🔗 https://… · cloud@infosec.exchange · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/48234