#oracle

2 analyses tagged oracle, sorted newest first.

critical 3 sources
Oracle PeopleSoft CVE-2026-35273: KEV SSRF-to-RCE Zero-Day Exploitation
CISA added actively exploited Oracle PeopleSoft PeopleTools CVE-2026-35273 to KEV on 2026-06-12. Affects PSEMHUB in versions 8.61 and 8.62, allowing unauthenticated remote code execution exploited by ShinyHunters.

#oracle #peoplesoft #peopletools #cisa-kev #rce #shinyhunters #zero-day

2026-06-12
high 3 sources
Oracle WebLogic Server CVE-2024-21182: KEV Authentication Bypass
CISA added Oracle WebLogic Server CVE-2024-21182 to its KEV catalog on 2026-06-01 due to active exploitation. This high-severity authentication bypass vulnerability allows unauthenticated attackers with network access via T3 or IIOP protocols to compromise the server and gain unauthorized access to critical data.

#oracle #weblogic #cisa-kev #authentication-bypass #zero-day

2026-06-01