Attackers Exploit Oracle PeopleSoft Flaw to Deploy Web Shells
A critical zero-day vulnerability in Oracle PeopleSoft, tracked as CVE-2026-35273, is being actively exploited by attackers to deploy web shells and bypass web application firewalls.
Tag
2 results in the archive.
A critical zero-day vulnerability in Oracle PeopleSoft, tracked as CVE-2026-35273, is being actively exploited by attackers to deploy web shells and bypass web application firewalls.
The Clop ransomware group developed a custom Java web shell targeting PTC Windchill and FlexPLM servers, enabling credential decryption, file enumeration, and data theft.