CVE-2026-35273

Vendor

Oracle

Product

PeopleSoft Enterprise PeopleTools

EPSS

1.00 (p100)

CISA KEV

listed

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 51
   KEV CISA KEV 12 Jun 2026

   Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

   Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools.

   KEV Fix available CVE-2026-35273 Oracle
2. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
3. 24
   Research ZDI 4d ago

   CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

   On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day Initiative first reported this CVE to Oracle on June 10, 2026, following an…

   CVE-2026-35273 Oracle
4. 22
   Threat intelligence Google TIG 25 Sep 2026

   ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

   Introduction As an update to the June 2026 post, ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit , Mandiant and Google Threat Intelligence Group (GTIG) have identified renewed mass exploitation of…

   CVE-2026-35273 Google Oracle
5. 22
   News The Register 3d ago

   Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

   Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns

   CVE-2026-101767CVE-2026-35273 Oracle
6. 14
   KrebsOnSecurity Krebs 24d ago

   ShinyHunters Extorted Boeing Spin-off Prior to Arrests

   A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang.…

   CVE-2026-35273
7. 14
   KrebsOnSecurity Krebs 28 Sep 2026

   Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

   Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's…

   CVE-2026-35273