Tag: peoplesoft

Why a WAF Alone Would Not Stop the PeopleSoft CVE-2026-35273 Web Shell Drop

pr0h0•September 29, 2026

ShinyHunters is exploiting Oracle PeopleSoft CVE-2026-35273 by slipping past WAF protections and dropping web shells, a reminder that edge filtering alone cannot contain post-exploitation tradecraft when patching lags.

peoplesoftweb-shellwaf-bypass

The PeopleSoft Zero-Day Patch: What Changed and How to Secure Your Instance

pr0h0•June 11, 2026

This walkthrough explains Oracle’s PeopleSoft zero-day patch, what changed in the fix, which attack paths it disrupts, and the concrete steps administrators should take to harden affected instances immediately.

peoplesoftoraclezero-day