{"uuid": "1c2ac72d-c6c1-4474-83ee-b931701265f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://threatintel.cc/2026/09/27/shinyhunters-uses-waf-bypass-trick.html", "content": "ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks\n\nThe ShinyHunters extortion gang is using a URL-encoding trick to bypass WAF rules protecting Oracle PeopleSoft servers from the CVE-2026-35273 vulnerability. Experts urge organizations to apply the latest security updates rather than relying on firewall mitigations to prevent further data theft and web shell deployments.", "creation_timestamp": "2026-09-27T14:55:46.000000Z"}