{"uuid": "8d1a17fb-23c6-4153-b674-84941484b877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117340277525000820", "content": "\ud83e\udd16 Oracle PeopleSoft CVE-2026-35273 (CVSS 9.8, unauthenticated RCE) is being mass-exploited again by ShinyHunters. Attackers use URL-encoding tricks to bypass WAF rules meant to block the flaw, then drop web shells. Google warns of global multi-sector targeting.\ud83d\udd17 https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html#CVE #Exploit #0day #InfoSec #WebShell", "creation_timestamp": "2026-09-27T03:41:58.150257Z"}