CERT24ShinyHunters-exploited Oracle PeopleSoft zero-day turns out to be three chained flawsLoading data…
CERT24Threat Observatory
Period

ShinyHunters-exploited Oracle PeopleSoft zero-day turns out to be three chained flaws

Researchers said the critical Oracle PeopleSoft flaw consisted of three chained vulnerabilities. Oracle patched all three under the single identifier CVE-2026-35273 on June 10. The issue affects PeopleTools 8.61 and 8.62 and was exploited before the fix and in a later campaign wave.

← Back to intelligence

ShinyHunters-exploited Oracle PeopleSoft zero-day turns out to be three chained flaws

Researchers said the critical Oracle PeopleSoft flaw consisted of three chained vulnerabilities. Oracle patched all three under the single identifier CVE-2026-35273 on June 10. The issue affects PeopleTools 8.61 and 8.62 and was exploited before the fix and in a later campaign wave.