CVE-2026-35273: Critical Oracle PeopleSoft RCE Exploited in the Wild

**CVE-2026-35273** is a critical (CVSS 9.8) unauthenticated remote code execution flaw in Oracle PeopleSoft PeopleTools (8.61, 8.62) affecting the Updates Environment Management component; it has been actively exploited by the ShinHunters group, including a breach at the University of Nottingham exposing over 450,000 student records, and Oracle released an emergency patch. Recommended actions include applying Oracle's patch immediately, restricting network access to affected endpoints, reviewing logs for anomalous HTTP requests, rotating credentials, and auditing connected databases.