{"uuid": "f62d28f8-b376-44a9-8766-474bdc384ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://t.me/BleepingComputer/25662", "content": "\u200aShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks\n\nThe ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/", "creation_timestamp": "2026-09-27T05:30:49.000000Z"}