sign in--:--:--UTC

CVE-2026-35273

exploited in the wild☆ pin

CVSS

9.8

Reports

16

First seen

Jun 11, 2026

Last seen

Jul 16, 2026

Affected product

Oracle PeopleSoft

Associated actors

ShinyHunters ×9 Clop ×2 Outsider ×2 Qilin ×2 ShinyHunter ×1 The Gentlemen ×1 Transparent Tribe ×1 Akira ×1 UAT-11795 ×1 Cloud Atlas APT ×1 Russia-linked groups ×1 SHADOW-AETHER-015 ×1

Recent reports

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

The Hacker NewsJul 16, 2026 Critical

Over 900 Oracle E-Business Suite instances exposed to ongoing CVE-2026-46817 attacks

Bleeping ComputerJul 1, 2026 Critical

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

The Hacker NewsJun 30, 2026 High

Nissan data breach linked to Oracle PeopleSoft zero-day exploited by ShinyHunters

Bleeping ComputerJun 29, 2026 High

NAIC confirms ShinyHunters stole public data in PeopleSoft zero-day breach

Bleeping ComputerJun 29, 2026 Critical

Hackers now exploit critical Oracle E-Business flaw in attacks

Bleeping ComputerJun 29, 2026 High

Oracle Releases June 2026 Security Updates: 244 Vulnerabilities Patched

NICS TaiwanJun 23, 2026 Critical

PeopleSoft PeopleTools Pre-Authentication RCE via PSIGW SSRF and XMLDecoder Deserialization

Trend Micro ResearchJun 18, 2026 High

Weekly Cybersecurity Recap: Chrome 0-Day, Oracle PeopleSoft Exploit, Supply Chain Attacks

The Hacker NewsJun 15, 2026 Critical

Check Point Threat Intelligence Report – 15 June 2026

Check Point ResearchJun 15, 2026 Critical

ShinyHunters actively extorting universities after exploiting Oracle PeopleSoft zero-day

CyberScoopJun 12, 2026 Critical

CISA Adds CVE-2026-35273 Oracle PeopleSoft to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesJun 12, 2026 Critical

High Threat Security Alert: Remote Code Execution Vulnerability in Oracle PeopleSoft (CVE-2026-35273)

GovCERT.HKJun 12, 2026 Critical

ShinyHunters Exploits Oracle PeopleSoft Zero-Day to Breach Universities

The Hacker NewsJun 11, 2026 Critical

Oracle patches critical PeopleSoft zero-day exploited by ShinyHunters in data theft attacks

Bleeping ComputerJun 11, 2026 Critical

Oracle PeopleSoft Enterprise PeopleTools Critical Vulnerability (CVE-2026-35273)

Canadian Centre AlertsJun 11, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans