CyberSIXT Search
Original
Image: SecurityOnline

SecurityOnlineDo Son

Oracle warns of critical PeopleSoft RCE flaw CVE-2026-35273

Part of the CVE-2026-35273 story · 28 articles · 12 outlets · since 11 Jun

A critical vulnerability, CVE-2026-35273, affecting PeopleSoft RCE has been discovered, presenting an immediate threat to enterprises. This flaw has a CVSS score of 9.8, allowing unauthorized remote attackers to exploit the system without authentication via HTTP. The vulnerability poses risks of complete system takeover, potentially allowing attackers to modify databases and execute arbitrary commands.

Oracle has issued an emergency security alert and recommends that system administrators apply the latest updates for PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 to mitigate this risk.

Story timeline CVE-2026-35273

Full timeline
Show as table
CVE-2026-35273 coverage
Published (UTC)OutletHeadline
Thu 11 Jun · 06:32 UTCSecurityOnlineOracle warns of critical PeopleSoft RCE flaw CVE-2026-35273 (this article)
Wed 23 Sep · 07:36 UTCSecurityWeekShinyHunters Claims FBI Breach Exposed Agents’ Personal Data
Wed 23 Sep · 14:38 UTCSecurity AffairsShinyHunters Claims FBI Applicant Data Breach via Oracle Flaw
Sat 26 Sep · 07:14 UTCGoogle CloudShinyHunters Expands Global Oracle PeopleSoft Exploitation Campaign
Mon 28 Sep · 11:30 UTCSecurityWeekShinyHunters Revive Attacks on PeopleSoft with WAF Bypass
Mon 28 Sep · 15:30 UTCKrebs on SecurityDutch Police Arrest Suspected ShinyHunters Hacker After Major Breaches
Tue 29 Sep · 10:22 UTCThe Hacker NewsDutch Police Arrest Suspected ShinyHunters Member in Amsterdam
Tue 29 Sep · 11:30 UTCSecurityWeekDutch Police Arrest Suspected ShinyHunters Member in Ongoing Probe
Tue 6 Oct · 07:46 UTCThe Hacker NewsFBI removes Accenture contractor after ShinyHunters breach exposes staff data
Wed 7 Oct · 14:31 UTCKrebs on SecurityTeen ShinyHunters Member Detained During Boeing Unit Extortion Attempt

Sources

Original articlesecurityonline.infoPrimary sourceoracle.com

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device