ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
2026-09-26T19:23:21Z•36271b82d0424bd05bf3bcb3dab44a81ef57e5084704c29ed13b170b458fac47
CVE-2026-35273CVE-2026-5430Adobe CommerceCSRFClopElementorGitHub ActionsGrav CMSKiteworksOracle PeopleSoftSharePointShinyHuntersWSO2WordPressactive exploitationcredential theftcybercrime marketplaceextortionpath traversalransomwaresupply chain compromiseweb application firewall bypasszero-day
What happened
BleepingComputer feed covering active exploitation of enterprise vulnerabilities, including Oracle PeopleSoft CVE-2026-35273 with WAF bypass techniques, exploited SharePoint/WSO2/Adobe Commerce flaws, WordPress Elementor account-creation vulnerabilities, compromised GitHub Actions, and potential zero-day attacks against Kiteworks. The feed also reports ransomware and extortion activity involving ShinyHunters and Clop, alongside non-security technology and product news.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 36271b82d0424bd05bf3bcb3dab44a81ef57e5084704c29ed13b170b458fac47
- Enrichment time
- 2026-09-26T19:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.