Vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools.

Read at CISA Known Exploited Vulnerabilities catalog

Vendor

Oracle

Product

PeopleSoft Enterprise PeopleTools

CISA KEV

listed

Exploitation

observed in the wild

Fix

available

• CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
• CVE-2026-35273 on this site · NVD · CVE.org · Vulnpedia · KEV

Other items that share a CVE or were clustered with this one.

1. 22
   News The Register 3d ago

   Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

   CVE-2026-101767CVE-2026-35273 Oracle
2. 24
   Research ZDI 4d ago

   CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

   CVE-2026-35273 Oracle
3. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
4. 14
   KrebsOnSecurity Krebs 24d ago

   ShinyHunters Extorted Boeing Spin-off Prior to Arrests

   CVE-2026-35273
5. 14
   KrebsOnSecurity Krebs 28 Sep 2026

   Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

   CVE-2026-35273
6. 22
   Threat intelligence Google TIG 25 Sep 2026

   ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

   CVE-2026-35273 Google Oracle
7. 50
   KEV CISA KEV 18 Jun 2026

   Splunk Enterprise Missing Authentication for Critical Function Vulnerability

   KEV Fix available CVE-2026-20253 Splunk