CERT24ShinyHunters bypasses WAFs in PeopleSoft attacks using URL-encoding trickLoading data…
CERT24Threat Observatory
Period

ShinyHunters bypasses WAFs in PeopleSoft attacks using URL-encoding trick

ShinyHunters is using URL-encoding variations to bypass WAF rules intended to protect against the Oracle PeopleSoft CVE-2026-35273 vulnerability. Google’s Mandiant and Threat Intelligence Group says this has allowed the attackers to resume targeting unpatched PeopleSoft servers.

← Back to intelligence

ShinyHunters bypasses WAFs in PeopleSoft attacks using URL-encoding trick

ShinyHunters is using URL-encoding variations to bypass WAF rules intended to protect against the Oracle PeopleSoft CVE-2026-35273 vulnerability. Google’s Mandiant and Threat Intelligence Group says this has allowed the attackers to resume targeting unpatched PeopleSoft servers.