U.S. CISA adds Oracle PeopleSoft Enterprise PeopleTools flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the Oracle PeopleSoft Enterprise PeopleTools vulnerability CVE-2026-35273 to its Known Exploited Vulnerabilities (KEV) catalog. The source describes it as a critical remote code execution vulnerability requiring no authentication or user interaction, and reports that it has been actively exploited.
CERT24