CVE-2026-35273

Oracle PeopleTools lacks authentication for critical functions, enabling unauthenticated attackers to gain full system control.

This critical vulnerability allows unauthenticated attackers to take over PeopleSoft Enterprise PeopleTools, a widely used ERP component in defense systems. The absence of authentication controls for critical functions creates a severe risk of data exfiltration and system compromise for DIB organizations relying on Oracle PeopleSoft. Immediate patching and network segmentation are required to mitigate this active exploitation threat.

Shame score — A critical authentication bypass in a widely deployed ERP system that enables unauthenticated takeover, directly linked to ransomware exploitation.