LOWVulnerability
Global

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

·Source: BleepingComputer

Updated:

Executive Summary

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]

Analysis

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]

Indicators of Compromise (1)

CVE (1)
CVE-2026-35273
NVDMITRE CVE
Source Attribution

Originally published by BleepingComputer on Sep 26, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Capitolis agrees $200m eSecLending acquisition

Capital markets technology provider Capitolis has added securities lending capabilities to its platform through a $200 million all-cash deal to buy eSecLending.

Finextra
MEDIUMVulnerabilityNEW

Citi launches multi-market instant payments on Swift scheme

Citi has gone live with multiple markets on the Swift payments scheme, enabling bank clients to access multiple cross-border instant payment markets through a single account structure.

Finextra
MEDIUMVulnerabilityNEW

Zilch eyes 2027 London IPO

Zilch is in talks with banks as it prepares to go public, with the UK-based buy now, pay later provider reportedly leaning towards a London listing.

Finextra