ShinyHunters ha sfruttato come zero-day CVE-2026-35273, una vulnerabilit� critica (CVSS 9.8) in Oracle PeopleSoft sfruttabile senza autenticazione, colpendo oltre 100 organizzazioni in 14 giorni. Oracle non ha ancora rilasciato una patch

Oracle released an out-of-band update for PeopleSoft to address CVE-2026-35273, a zero-day vulnerability likely exploited by ShinyHunters.

ShinyHunters exploited CVE-2026-35273 (CVSS 9.8) to breach 100+ organisations using Oracle PeopleSoft. Two-thirds are universities. No patch exists yet.