The flaw, CVE-2026-35273, carries a CVSS severity score of 9.8 out of 10 and enables a remote attacker to execute arbitrary code on a PeopleSoft server without supplying any credentials. No password.

Oracle has disclosed CVE-2026-35273, a critical vulnerability in PeopleSoft Enterprise PeopleTools that has already been exploited by threat actors. The vulnerability allows unauthenticated attackers ...

Oracle issued emergency guidance for CVE-2026-35273, a critical PeopleSoft flaw exploited in a ShinyHunters-linked campaign targeting universities. A critical Oracle PeopleSoft flaw is already being ...

Oracle has issued an emergency security advisory warning customers about a critical vulnerability in its PeopleSoft software after a reported large-scale exploitation campaign linked to the cybercrime ...

Cybersecurity researchers at Google's Threat Intelligence Group (GTIG) recently revealed that the notorious hacking group ShinyHunters used a serious flaw in Oracle PeopleSoft to attack more than 100 ...

Cybersecurity firms Mandiant and Google Threat Intelligence uncovered a major cyberattack. The hacking group ShinyHunters targeted Oracle's PeopleSoft software. This campaign exploited a zero-day ...

Oracle has issued an out-of-band patch for a remote code execution (RCE) zero-day vulnerability affecting its PeopleSoft Enterprise PeopleTools product that is being exploited in a rapidly spreading ...

One of the world’s most active ransomware groups exploited a critical vulnerability in Oracle’s PeopleSoft software suite and used it to target about 100 customers and extort at least one of them to ...

Attackers leveraged a critical unauthenticated RCE bug to breach higher‑ed institutions, deploy stealth remote access tools, and publish stolen data. A newly disclosed Oracle PeopleSoft zero-day ...

Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation. Google has confirmed that a PeopleSoft vulnerability mitigated by Oracle this week ...

Key Takeaways by nexos.ai, reviewed by Cybernews staff. The campaign took place between May 27 and June 9, Google said in a blog. PeopleSoft is an enterprise resource planning suite used by ...