CVE Tools
Track your stack

PeopleSoft RCE Security Bug: New Oracle Fix

Daily CyberSecurity (securityonline.info)By Do Son

PatchPeopleSoft Enterprise PeopleTools

Our summary

Oracle has issued an emergency update for a PeopleSoft remote code execution vulnerability that can be triggered over the network without authentication. The issue affects PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 and is tracked as CVE-2026-35273 (CVSS 9.8), enabling attackers with HTTP access to take over systems, alter databases, and execute arbitrary commands. Organizations running affected deployments should apply Oracle’s patched update immediately and validate that exposed instances are remediated.

Read at Daily CyberSecurity (securityonline.info)

Daily CyberSecurity (securityonline.info) publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacksCVE-2026-35273
  2. The Hacker NewsAttackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web ShellsCVE-2026-35273
  3. SecurityWeekShinyHunters Claims FBI Hack, Demands Retraction of Threat ReportCVE-2026-35273
  4. The Hacker NewsShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job ApplicantsCVE-2026-35273
  5. Kaspersky SecurelistExploits and vulnerabilities in Q2 2026CVE-2026-35273
  6. Rapid7 BlogWhat’s New in Rapid7 Products and Services: Q2 2026 in ReviewCVE-2026-35273
  7. The Hacker NewsThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesCVE-2026-35273
  8. Хакер (xakep.ru)Из-за взлома Oracle PeopleSoft у компании Nissan украли данныеCVE-2026-35273
  9. BleepingComputerOver 900 Oracle E-Business instances exposed to ongoing attacksCVE-2026-35273
  10. SecurityWeekNissan Employee Data Breached in Oracle PeopleSoft HackCVE-2026-35273

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store