Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Oracle PeopleSoft Enterprise PeopleTools flaw to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairs ()4 min read1 · 1 read
Read at securityaffairs.com
Analyze CVE-2026-35273 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-35273
Tags
cve-2026-35273exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-35273
Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools
9.897%KEVRansomwarePoC
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
domainazurenetfiles.netto automate Let’s Encrypt SSL certificate provisioning for azurenetfiles.net , giving their C2 a valid certificate. They then used MeshC
ipv4176.120.22.24essed with zstd , followed by an outbound SSH connection to 176.120.22.24 , the IP hosting the public mirror of the ShinyHunters data

From the original article

4 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle PeopleSoft Enterprise PeopleTools flaw to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.