ShinyHunters Uses URL Encoding to Bypass WAF Protections for Oracle PeopleSoft CVE-2026-35273
ShinyHunters is exploiting a URL-encoding technique to bypass web application firewall rules designed to block the vulnerable PSEMHUB endpoint in Oracle PeopleSoft systems, enabling renewed attacks on unpatched servers.