Oracle PeopleSoft Critical Flaw Exploited by ShinyHunters Turns Out to Be Three Chained Vulnerabilities

Researchers disclosed that the critical Oracle PeopleSoft vulnerability exploited by the ShinyHunters group since May consists of three chained flaws, not…

If you run Oracle PeopleSoft, ensure CVE-2026-35273 patch from June is applied. Review access logs for internal management interfaces for anomalous activity during May–June. Audit loopback trust configurations in your environment.