{"uuid": "566ec6ab-506d-403a-884f-b9bbf459e970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117373012079753151", "content": "The ShinyHunters extortion gang is bypassing Web Application Firewall (WAF) rules by using URL-encoding tricks to exploit the Oracle PeopleSoft CVE-2026-35273 vulnerability. Mandiant urges organizations to apply the official security update rather than relying on WAF blocks, as attackers continue to deploy web shells and malware to steal sensitive data.https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/", "creation_timestamp": "2026-10-02T19:40:33.398960Z"}