ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
2026-09-27T01:23:20Z•551852efebedcb78203d2143a10c9e6000e8a53fbafb5793f5fa7c29a368d52b
CVE-2026-35273CVE-2026-5430Adobe CommerceCISACSRFElementorGitHub ActionsGrav CMSOracle PeopleSoftSharePointShinyHuntersWSO2WordPressaccount takeoveractive exploitationextortionpath traversalransomwaresupply-chain compromiseweb application firewall bypasszero-day
What happened
BleepingComputer security coverage reports active exploitation and security incidents including ShinyHunters bypassing WAF protections to exploit Oracle PeopleSoft CVE-2026-35273, exploitation of WSO2 authentication bypass CVE-2026-5430, compromised GitHub Actions retaining malicious payloads, and vulnerabilities affecting Grav CMS and Elementor WordPress. The feed also covers potential zero-day attacks against Kiteworks and other operational security developments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 551852efebedcb78203d2143a10c9e6000e8a53fbafb5793f5fa7c29a368d52b
- Enrichment time
- 2026-09-27T01:23:20Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.