Oracle Addresses Critical PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks

Oracle has released mitigations for a critical PeopleSoft vulnerability, CVE-2026-35273, which allows an unauthenticated attacker to achieve remote code execution. This security alert comes amidst reports that the ShinyHunters hacker group has been actively targeting organizations using PeopleSoft, emphasizing the urgency for users to apply the provided mitigations.