The critical Oracle PeopleSoft zero-day vulnerability, actively exploited by the ShinyHunters cybercrime group since May, has been identified as three chained flaws, researchers confirmed this week. Oracle patched all three under CVE-2026-35273 in June.
