SecurityThe Hacker Newsabout 4 hours ago
ShinyHunters Exploits Oracle PeopleSoft Flaw
4 min read
Google warns that ShinyHunters-linked UNC6240 is bypassing WAFs to exploit CVE-2026-35273, a critical Oracle PeopleSoft flaw, by URL-encoding a single character in the PSEMHUB path. The campaign hits higher education, healthcare, government and technology sectors, deploying web shells on dozens of systems and stealing data for extortion.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyOracle
