importantSYS.SOURCE: TheHackerNews• 2026-10-28T11:34:58+05:30

Oracle PeopleSoft Vulnerability CVE-2026-35273 Revealed as Three Chained Flaws

#oracle #vulnerability #ssrf #patch

The ShinyHunters exploited Oracle PeopleSoft vulnerability CVE-2026-35273, which was later revealed to consist of three chained flaws. The root cause was a server-side request forgery (SSRF) exploiting trust in the loopback address, patched by Oracle in June.

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week.

Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address

Read original article

*** END OF TRANSMISSION ***

> FABRICATED PROTESTS AND SOCIAL MEDIA MANIPULATION IN BARCELONA > U.S. HOUSEHOLD WEALTH DISTRIBUTION VISUALIZED TO SCALE > ANTHROPIC AI MODEL DISCOVERS CROSS-PLATFORM VULNERABILITIES IN CHROME, SAFARI, WINDOWS, AND LINUX > FBI SEIZES VIRTUALINE DOMAIN LINKED TO CRIMINAL HOSTING AND BITCOIN MONEY LAUNDERING > JAPAN'S GMO INTERNET GROUP LAUNCHES $1 MILLION REWARD FOR FX TRADING CLOUD BREACH HACKERS > TAILSCALE ADDRESSES CRITICAL SSH VULNERABILITIES ALLOWING ROOT ACCESS EXPLOITS > ORACLE PEOPLESOFT VULNERABILITY CVE-2026-35273 REVEALED AS THREE CHAINED FLAWS > ADOBE COMMERCE AND BROTLI DECODER VULNERABILITIES EXPLOITED IN ACTIVE ATTACKS > JIO PLATFORMS' STOCK RISES 21% ON SUCCESSFUL MARKET DEBUT FOLLOWING RECORD-BREAKING IPO > VERSION CONTROL FOR FEDERAL STATUTES USING GIT-LIKE SYSTEMS> FABRICATED PROTESTS AND SOCIAL MEDIA MANIPULATION IN BARCELONA > U.S. HOUSEHOLD WEALTH DISTRIBUTION VISUALIZED TO SCALE > ANTHROPIC AI MODEL DISCOVERS CROSS-PLATFORM VULNERABILITIES IN CHROME, SAFARI, WINDOWS, AND LINUX > FBI SEIZES VIRTUALINE DOMAIN LINKED TO CRIMINAL HOSTING AND BITCOIN MONEY LAUNDERING > JAPAN'S GMO INTERNET GROUP LAUNCHES $1 MILLION REWARD FOR FX TRADING CLOUD BREACH HACKERS > TAILSCALE ADDRESSES CRITICAL SSH VULNERABILITIES ALLOWING ROOT ACCESS EXPLOITS > ORACLE PEOPLESOFT VULNERABILITY CVE-2026-35273 REVEALED AS THREE CHAINED FLAWS > ADOBE COMMERCE AND BROTLI DECODER VULNERABILITIES EXPLOITED IN ACTIVE ATTACKS > JIO PLATFORMS' STOCK RISES 21% ON SUCCESSFUL MARKET DEBUT FOLLOWING RECORD-BREAKING IPO > VERSION CONTROL FOR FEDERAL STATUTES USING GIT-LIKE SYSTEMS