Exploited Oracle PeopleSoft Zero-Day Revealed to Be Three Chained Flaws

CRITICAL // SOURCE: thehackernews.com 28 Oct 2026, 06:04

// AI SUMMARY — the text below is automatically generated and may contain inaccuracies. Read the full, original article at the source below.

Researchers revealed that the critical Oracle PeopleSoft vulnerability exploited by ShinyHunters since May actually consists of three chained flaws. The root issue is an SSRF vulnerability reaching an internal management interface due to loopback trust issues. Oracle patched all three under CVE-2026-35273 in June.

OraclePeopleSoftCVE-2026-35273SSRF

READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →