Security
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The Hacker News·October 28, 2026·1 min read
The critical Oracle PeopleSoft vulnerability exploited by ShinyHunters since May is actually three chained flaws, researchers revealed this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. The root cause is a server-side request forgery that reaches an internal management interface because PeopleSoft trusts its own loopback address.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.