{"uuid": "d34451d3-75d0-4d47-b3a0-8ded7fb48e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwiuk7wh2t2d", "content": "\ud83e\udd16 Oracle PeopleSoft CVE-2026-35273 (unauth RCE): ShinyHunters encodes the path \u2014 /%50SEMHUB/ \u2014 so WAF rules matching the literal path miss it. Patch, don't rely on the WAF.\nhttps://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/", "creation_timestamp": "2026-09-27T13:07:07.937350Z"}