CVE-2026-35273

ShinyHunters Renews Oracle PeopleSoft Attacks With One-Character WAF Bypass North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

ShinyHunters Renews Oracle PeopleSoft Attacks With One-Character WAF Bypass

Do Son September 29, 2026

Changing one letter to its URL code let attackers walk past firewall rules meant to block a...

PeopleSoft RCE Security Bug: New Oracle Fix PeopleSoft RCE security bug, unauthenticated HTTP exploit, CVE-2026-35273 Oracle security patch updates critical software vulnerabilities

PeopleSoft RCE security bug, unauthenticated HTTP exploit, CVE-2026-35273 Oracle security patch updates critical software vulnerabilities

PeopleSoft RCE Security Bug: New Oracle Fix

Do Son June 11, 2026

Oracle released an emergency security alert addressing a severe threat. Specifically, the newly patched PeopleSoft RCE security...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-106931CVSS 8.5
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
Admin intel📅 Updated: Oct 15, 2026
CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2025-61624CVSS 6.0
An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
Admin intel📅 Updated: Oct 15, 2026
CVE-2026-110447CVSS 9.2
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2026-105133CVSS 6.9
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
CISA KEV📅 Added to KEV: Oct 14, 2026
CVE-2026-105134CVSS 10.0
A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the...
CISA KEV📅 Added to KEV: Oct 14, 2026

CVE-2026-76578CVSS 9.8
A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not...
📅 Updated: Oct 15, 2026
CVE-2026-11861CVSS 9.6
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active...
📅 Updated: Oct 15, 2026
CVE-2026-108587CVSS 9.8
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to...
📅 Updated: Oct 15, 2026
CVE-2026-92464CVSS 9.1
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in...
📅 Updated: Oct 15, 2026
CVE-2026-92909CVSS 9.8
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the...
📅 Updated: Oct 15, 2026
CVE-2026-76519CVSS 9.8
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated,...
CISA KEV📅 Added to KEV: Oct 14, 2026📅 Updated: Oct 15, 2026
CVE-2026-59774CVSS 9.8
Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side...
📅 Updated: Oct 15, 2026
CVE-2026-48382CVSS 10.0
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in...
📅 Updated: Oct 15, 2026

Critical Alert 4 Active Exploits Detected Today

ShinyHunters Renews Oracle PeopleSoft Attacks With One-Character WAF Bypass

PeopleSoft RCE Security Bug: New Oracle Fix