https://calebgarber.com/tags/waf/ Recent content in Waf on Caleb Garber Hugo -- 0.165.0 en-us Tue, 06 Oct 2026 00:00:00 +0000 https://calebgarber.com/posts/shinyhunters-is-still-exploiting-oracle-peoplesoft-cve-2026-35273/ Tue, 06 Oct 2026 00:00:00 +0000 https://calebgarber.com/posts/shinyhunters-is-still-exploiting-oracle-peoplesoft-cve-2026-35273/ CVE-2026-35273 is a 9.8 remote code execution flaw in Oracle PeopleSoft PeopleTools that Oracle patched on June 10. Organizations that blocked the vulnerable endpoint instead found the rule bypassed three months later. Here is how I test a mitigation before I record it as coverage.