CVE-2026-35273

🗓️ 11 Jun 2026 02:25:15Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 32 Media mentions👁 1166 Views

CVE-2026-35273 enables unauthenticated HTTP takeover of PeopleTools Updates Environment Management.

Reporter	Title	Published	Views	Family All 19
GithubExploit	Exploit for CVE-2026-35273	12 Jun 202609:19	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise_Peopletools	26 Jun 202605:21	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise_Peopletools	15 Jun 202620:24	–	githubexploit
BDU FSTEC	The vulnerability of the Updates Environment Management component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to execute arbitrary code.	16 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-35273	11 Jun 202600:39	–	circl
CISA KEV Catalog	Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability	12 Jun 202600:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	12 Jun 202612:00	–	cisa
CNNVD	Oracle PeopleSoft Enterprise PeopleTools 访问控制错误漏洞	11 Jun 202600:00	–	cnnvd
Cvelist	CVE-2026-35273	11 Jun 202602:25	–	cvelist
EUVD	EUVD-2026-36199	11 Jun 202602:25	–	euvd

NVD

Vulners

Node

oracle peoplesoft_enterprise_peopletoolsMatch8.61

oracle peoplesoft_enterprise_peopletoolsMatch8.62

[
  {
    "product": "PeopleSoft Enterprise PeopleTools",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "8.61"
      },
      {
        "status": "affected",
        "version": "8.62"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/alert-cve-2026-35273.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 10:40Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.19.8

EPSS0.9233

SSVC