CISA Warns of Oracle PeopleSoft 0-Day Vulnerability Exploited in Ransomware Attacks

CISA has added a critical Oracle PeopleSoft vulnerability, tracked as CVE-2026-35273, to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. The flaw affects Oracle PeopleSoft Enterprise PeopleTools and enables unauthenticated attackers to gain full control over affected systems. The vulnerability is classified under CWE-306 (Missing Authentication for Critical Function), indicating a […] The post CISA Warns of Oracle PeopleSoft 0-Day Vulnerability Exploited in Ransomware Attacks appeared first on Cyber Security News.