Why a WAF Alone Would Not Stop the PeopleSoft CVE-2026-35273 Web Shell Drop

ShinyHunters is exploiting Oracle PeopleSoft CVE-2026-35273 by slipping past WAF protections and dropping web shells, a reminder that edge filtering alone cannot contain post-exploitation tradecraft when patching lags.