ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

🗓️ 26 Sep 2026 13:36:11Reported by Deeba AhmedType

hackread🔗 hackread.com👁 1 Views

URL encoding in Oracle PeopleSoft allows WAF bypass to deploy web shells and SIDEEYE.

Reporter	Title	Published	Views	Family All 30
GithubExploit	Exploit for CVE-2026-35273	12 Jun 202609:19	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise_Peopletools	26 Jun 202605:21	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise_Peopletools	15 Jun 202620:24	–	githubexploit
BDU FSTEC	The vulnerability of the Updates Environment Management component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to execute arbitrary code.	16 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-35273	11 Jun 202600:39	–	circl
CISA KEV Catalog	Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability	12 Jun 202600:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	12 Jun 202612:00	–	cisa
CNNVD	Oracle PeopleSoft Enterprise PeopleTools 访问控制错误漏洞	11 Jun 202600:00	–	cnnvd
CVE	CVE-2026-35273	11 Jun 202602:25	–	cve
Cvelist	CVE-2026-35273	11 Jun 202602:25	–	cvelist

26 Sep 2026 13:36Current

8.1High risk

Vulners AI Score8.1

CVSS 3.19.8

EPSS0.09444

SSVC

Oracle PeopleSoft CVE-2026-35273 URL encoding WAF bypass web shell SIDEEYE backdoor