Sec Feed Reader

CVE-2026-35273

Kenndaten

CVE.org (extern): Record bei CVE.org oeffnen
CVSS (CVE.org): 9.8
EPSS (FIRST): Score —, Perzentil —
EPSS-Stand: —
Veroeffentlicht (CVE.org): 2026-06-11
Zuletzt angereichert: 2026-10-20 22:46 UTC
Externe Referenzen (Anzahl): 0
Anreicherungs-Plugins (Referenzen): —
CVSS (Quelle / verkn. Eintraege): 9.8 — Werte aus Feed-Eintraegen; CVSS (CVE.org) kommt aus Anreicherung cve_org.

Veroeffentlicht	Quelle	Titel	Severity	Kategorie
2026-09-26 19:03	bleeping_c	ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks	CRITICAL	security_news
2026-09-26 11:46	thn_global	Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells	CRITICAL	security_news
2026-06-25 09:09	cert_bund	[UPDATE] [kritisch] Oracle PeopleSoft: Schwachstelle ermöglicht Codeausführung	CRITICAL	government_cert
2026-06-24 05:00	zdi_pub	ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability	CRITICAL	threat_intel
2026-06-24 05:00	zdi_pub	ZDI-26-389: Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability	CRITICAL	threat_intel
2026-06-24 05:00	zdi_pub	ZDI-26-388: Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability	CRITICAL	threat_intel
2026-06-12 00:00	cisa_kev	CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability	CRITICAL	threat_intel
2026-06-11 20:29	thn_global	ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities	CRITICAL	security_news
2026-06-11 19:39	bleeping_c	Oracle mitigates PeopleSoft zero-day exploited in data theft attacks	CRITICAL	security_news