ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks HackRead By: Deeba Ahmed 26 September 2026 at 09:36 ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.