Oracle PeopleSoft Vulnerability Actively Exploited

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

Critical

CVE-2026-35273

Oracle

June 12, 2026

Executive Summary

CVE-2026-35273 (CVSS 9.8) actively exploited; allows unauthenticated remote code execution via HTTP on PeopleSoft instances.

Key Details

Affected Platform

Oracle PeopleSoft

Attack Surface

Network accessible, unauthenticated

Recommended Action

Apply vendor patch

Affected Environment

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62; predominantly universities and government entities.

Operational Impact

Over 100 organisations and approximately 300 PeopleSoft instances compromised; backdoors deployed and data exfiltrated.

Technical Root Cause

Management functionality exposed over HTTP without authentication in PeopleSoft’s Environment Management component.

Recommended Mitigation

Disable or restrict PSEMHUB and HttpListeningConnector endpoints; apply Oracle patches immediately after testing.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore Managed Detection and Response

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

The Hacker News – ShinyHunters exploits Oracle PeopleSoft (June 2026). Oracle Security Alert – CVE-2026-35273. SecurityWeek – Oracle addresses PeopleSoft vulnerability amid zero-day attack reports. CVE: CVE-2026-35273.