Will the Oracle PeopleSoft zero-day (CVE-2026-35273) lead to 5+ documented enterprise breaches by end of 2026?

Nissan disclosed a data breach affecting employees after attackers exploited an Oracle PeopleSoft vulnerability linked to ShinyHunters' extortion campaign. The vulnerability (CVE-2026-35273) is a zero-day affecting the widely-deployed PeopleSoft platform. Given PeopleSoft's presence in Fortune 500 and critical infrastructure organizations, the risk of cascading breaches is high.

Resolution Criteria

Public breach disclosures (SEC filings, vendor advisories, regulatory notifications, or security research reports) documenting exploitation of CVE-2026-35273 resulting in unauthorized data access at 5 or more distinct organizations by December 31, 2026.