CERT24ShinyHunters-exploited Oracle PeopleSoft zero-day turns out to be three chained flawsLoading data…
CERT24Threat Observatory
Period

ShinyHunters-exploited Oracle PeopleSoft zero-day turns out to be three chained flaws

The critical Oracle PeopleSoft flaw exploited by ShinyHunters since May consists of three chained vulnerabilities. Oracle patched all three under the single identifier CVE-2026-35273 on June 10. The flaw is listed in CISA's Known Exploited Vulnerabilities catalog and was exploited before the fix was released, followed by a larger campaign.

← Back to intelligence

ShinyHunters-exploited Oracle PeopleSoft zero-day turns out to be three chained flaws

The critical Oracle PeopleSoft flaw exploited by ShinyHunters since May consists of three chained vulnerabilities. Oracle patched all three under the single identifier CVE-2026-35273 on June 10. The flaw is listed in CISA's Known Exploited Vulnerabilities catalog and was exploited before the fix was released, followed by a larger campaign.