CISA Issues Alert on Oracle PeopleSoft Vulnerability Exploited by Ransomware Groups

CISA warns of active exploitation of Oracle PeopleSoft CVE-2026-35273, an authentication-bypass in PeopleTools that can grant unauthenticated attackers full control of affected environments; the vulnerability has been added to CISA's Known Exploited Vulnerabilities catalog and observed in ransomware campaigns, prompting accelerated remediation deadlines and immediate mitigation and monitoring guidance for impacted organizations.