Signalis
sign in--:--:--UTC
CVEs

CVE-2026-35273

exploited in the wild☆ pin
CVSS
9.8
Reports
26
First seen
Jun 11, 2026
Last seen
Oct 13, 2026
Affected product

Oracle PeopleSoft

Associated actors

ShinyHunters ×18Outsider ×2Clop ×2Qilin ×2Red Heron ×1Rey ×1Russia-linked groups ×1SHADOW-AETHER-015 ×1ShinyHunter ×1Suspected Chinese-speaking threat actor ×1Suspected Russian-speaking threat actor ×1The Gentlemen ×1Transparent Tribe ×1UAT-11795 ×1UAT-11823 ×1UAT-11988 ×1UAT-12197 ×1Akira ×1UNC3569 ×1Cloud Atlas APT ×1

Recent reports

Critical

September 2026 CVE Landscape: 94 High-Impact Vulnerabilities with Active Exploitation

Recorded Future InsiktCritical

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

KrebsOnSecurityHigh

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

The Hacker NewsCritical

Dutch Police Arrest ShinyHunters Member Pepijn van der Stap; Group Claims FBI Data Breach

The Hacker NewsCritical

ShinyHunters exploiting Oracle PeopleSoft vulnerability with adaptive workarounds

The Record (Recorded Future News)Critical

Dutch Police Arrest Reformed Hacker Linked to ShinyHunters Data Theft Group

KrebsOnSecurityCritical

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

Bleeping ComputerCritical

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

The Hacker NewsCritical

ShinyHunters Claims FBI Breach, Steals Data on Agents and Job Applicants

The Hacker NewsHigh

Exploits and vulnerabilities in Q2 2026

Kaspersky SecurelistHigh

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

The Hacker NewsCritical

Over 900 Oracle E-Business Suite instances exposed to ongoing CVE-2026-46817 attacks

Bleeping ComputerCritical

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

The Hacker NewsHigh

Nissan data breach linked to Oracle PeopleSoft zero-day exploited by ShinyHunters

Bleeping ComputerHigh

NAIC confirms ShinyHunters stole public data in PeopleSoft zero-day breach

Bleeping ComputerCritical

Hackers now exploit critical Oracle E-Business flaw in attacks

Bleeping ComputerHigh

Oracle Releases June 2026 Security Updates: 244 Vulnerabilities Patched

NICS TaiwanCritical

PeopleSoft PeopleTools Pre-Authentication RCE via PSIGW SSRF and XMLDecoder Deserialization

Trend Micro ResearchHigh

Weekly Cybersecurity Recap: Chrome 0-Day, Oracle PeopleSoft Exploit, Supply Chain Attacks

The Hacker NewsCritical

Check Point Threat Intelligence Report – 15 June 2026

Check Point ResearchCritical

ShinyHunters actively extorting universities after exploiting Oracle PeopleSoft zero-day

CyberScoopCritical

CISA Adds CVE-2026-35273 Oracle PeopleSoft to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesCritical

High Threat Security Alert: Remote Code Execution Vulnerability in Oracle PeopleSoft (CVE-2026-35273)

GovCERT.HKCritical

ShinyHunters Exploits Oracle PeopleSoft Zero-Day to Breach Universities

The Hacker NewsCritical

Oracle patches critical PeopleSoft zero-day exploited by ShinyHunters in data theft attacks

Bleeping ComputerCritical

Oracle PeopleSoft Enterprise PeopleTools Critical Vulnerability (CVE-2026-35273)

Canadian Centre Alerts

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans