Oracle EBS flaw draws probes a week after patch; PeopleSoft chain has three bugs

Feeds.4Sysops •IT News • October 29, 2026

Oracle E-Business Suite (EBS) is seeing exploratory probes for a critical flaw patched in Oracle’s October update. Separately, researchers have identified three linked vulnerabilities behind ShinyHunters’ PeopleSoft attack, expanding on findings that the zero-day involved a chain of flaws . Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle PeopleSoft Zero-Day Exploited via Chained Vulnerabilities Researchers revealed that the Oracle PeopleSoft zero-day exploited by ShinyHunters was a chain of three vulnerabilities, identified as CVE-2026-35273. This flaw allowed unauthenticated remote code execution, enabling attackers to potentially take over servers. Oracle released a patch for this vulnerability on June 10, 2026, and it was added to the CISA KEV catalog the following day due to. The vulnerabilities allowed external requests to access PeopleSoft’s internal management interface. The ongoing investigation into the attack continues as Oracle E-Business Suite also faces scrutiny for a critical flaw patched recently. 2 sources 70

Extracted Entities

Platforms (2)

Oracle E-business Suite PeopleSoft