ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

🗓️ 23 Sep 2026 05:30:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 3 Views

ShinyHunters used an Oracle PeopleSoft zero-day to gain remote code execution in the FBI.

Reporter	Title	Published	Views	Family All 29
GithubExploit	Exploit for CVE-2026-35273	12 Jun 202609:19	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise_Peopletools	26 Jun 202605:21	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise_Peopletools	15 Jun 202620:24	–	githubexploit
BDU FSTEC	The vulnerability of the Updates Environment Management component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to execute arbitrary code.	16 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-35273	11 Jun 202600:39	–	circl
CISA KEV Catalog	Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability	12 Jun 202600:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	12 Jun 202612:00	–	cisa
CNNVD	Oracle PeopleSoft Enterprise PeopleTools 访问控制错误漏洞	11 Jun 202600:00	–	cnnvd
CVE	CVE-2026-35273	11 Jun 202602:25	–	cve
Cvelist	CVE-2026-35273	11 Jun 202602:25	–	cvelist

23 Sep 2026 05:30Current

CVSS 3.19.8

EPSS0.95473

SSVC

FBI Oracle PeopleSoft zero-day remote code execution data theft web defacement