CVE-2026-35273 2

Vulnerability (CVE)

Shiny Hunters Renewed Mass Exploitation Campaign Targeting Oracle People Soft

Cyber Risks Google Threat Intelligence Sep 25, 2026

Introduction As an update to the June 2026 post, ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit , Mandiant and Google Threat Intelligence Group (GTIG) have identified renewed mass exploitation of CVE-2026-35273 by UNC6240...

Threat Actors & Nation-State

CVE-2026-35273: Oracle People Soft Enterprise People Tools Missing Authentication for Critical Function Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jun 12, 2026

Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools.

Vulnerabilities & Patching