ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address
X で速報を受け取る悪用・大規模な漏洩・障害を、対処法と一緒に。
フォロー @vulnpulse_app| CVE | CVE-2026-35273 |
|---|---|
| 情報源 | The Hacker News |
| 取得日時 | 2026/10/28 16:14 |
| データ | Markdown JSON |
2026/10/28 15:04、The Hacker Newsが「ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws」を公開しました (種別: セキュリティニュース)。重大度は「緊急」(critical) です。CVE: CVE-2026-35273。