// Oracle HealthCRITICAL
ShinyHunters threat group has actively exploited three chained vulnerabilities in Oracle PeopleSoft (CVE-2026-35273) enabling unauthenticated remote code execution. Initial exploitation began in May 2026; a renewed, larger wave in September 2026 targeted dozens of systems across education, technology, healthcare, agriculture, transport, and government sectors. The vulnerability chain combines an SSRF in the Integration Gateway with misplaced trust in loopback addresses, allowing attackers to reach the internal Environment Management Hub and achieve code execution without authentication.
// Get alerts for Oracle Health