ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address
X에서 속보 받기악용·대형 유출·장애를 대응 방법과 함께.
팔로우 @vulnpulse_app| CVE | CVE-2026-35273 |
|---|---|
| 정보원 | The Hacker News |
| 수집 시각 | 2026. 10. 28. 오후 04:14 |
| 데이터 | Markdown JSON |
2026. 10. 28. 오후 03:04, The Hacker News에서 "ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws"을(를) 게시했습니다 (유형: 보안 뉴스). 심각도는 "긴급"(critical)입니다. CVE: CVE-2026-35273.