The ShinyHunters extortion gang is actively exploiting a known Oracle PeopleSoft vulnerability, CVE-2026-35273, by using a URL-encoding trick to bypass web application firewalls (WAFs). This allows them to achieve unauthenticated remote code execution and deploy web shells on vulnerable servers. The renewed mass exploitation highlights the importance of not only patching but also ensuring WAF rules are robust against evasion techniques.