UNC6240 - f4n6

notes

Oracle June 2026 Critical Security Patch Update Addresses 243 CVEs (CVE-2026-35273)

1. Executive summary Oracle's June 2026 Critical Security Patch Update (CSPU) addresses 243 CVEs across 245 patches in 11 product families, with 122 critical-

18 Jun 2026 · 6 min read read →

notes

Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)

1. Executive summary Oracle has issued an out-of-band patch for CVE-2026-35273, a critical vulnerability (CVSS 9.8, IN CISA KEV since 2026-

16 Jun 2026 · 10 min read read →

notes

ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit

1. Executive summary Threat actor UNC6240 (attributed publicly to "ShinyHunters") is actively exploiting CVE-2026-35273, a critical remote code execution vulnerability (CVSS 9.

11 Jun 2026 · 7 min read read →