Attackers have actually started penetrating the Internet for systems unpatched versus a just recently divulged vital Oracle E-Business Suite (EBS )vulnerability.
Found in a core part of EBS’s Application Object Library and tracked as CVE-2026-101767this defect lets unauthenticated danger stars with HTTP network gain access to take control of susceptible systems in low-complexity attacks.
Oracle launched security updates to resolve the problem in its October 2026 Critical Security Patch Update on October 20 and advised consumers to spot their systems right away.
“In some instances, it has been reported that attackers have been successful because targeted customers had failed to apply available Oracle patches,” it stated. “Oracle therefore strongly recommends that customers remain on actively-supported versions and apply security patches without delay.”
While Oracle has actually not yet tagged CVE-2026-101767 as made use of in the wild, danger intelligence business Defused stated on Tuesday that it currently identified hazard stars scanning the Internet for susceptible systems.
“Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS’s Thin Client Framework servlet that chains to remote code execution, this morning, Oct 27,” Pacified cautioned
Web danger guard dog Shadowserver now tracks over 670 Internet-exposed Oracle EBS circumstancesthe majority of them with IP addresses from the United States. Shadowserver does not show how lots of are honeypots or have actually currently been protected versus the CVE-2026-101767 defect.
Aggressors frequently target Oracle vulnerabilities due to the fact that they let them breach business systems on the networks of lots of Fortune 100 corporations, federal government companies, and health care networks all over the world.
Considering that early August 2025, the Clop extortion gang has actually made use of another Oracle EBS defect (CVE-2025-61882) in zero-day attacks targeting prominent victims like Logitech, GlobalLogic, and the Washington Post, as well as United States universities (consisting of Harvard University, the University of Pennsylvania, Dartmouth College, and the University of Phoenix)
More just recently, in June, Oracle launched emergency situation mitigations for a vital PeopleSoft Suite zero-day (CVE-2026-35273) that the ShinyHunters extortion gang made use of in between May 27 and June 9
By abusing this defect, the danger stars got unauthenticated remote code execution on victims’ systems and took information from lots of companies worldwide, consisting of Nottingham University, Nissan, and the National Association of Insurance Commissioners (NAIC).
Considering that November 2021, CISA has actually included 46 Oracle security bugs to its list of actively made use of vulnerabilities, 13 of which have actually likewise been abused in ransomware attacks.
As soon as aggressors have legitimate qualifications, just 37 % of their actions are obstructed
General avoidance ratings can conceal what takes place after preliminary gain access to. When aggressors are utilizing legitimate qualifications, avoidance drops greatly.
Heaven Report 2026 procedures defenses method by strategy throughout 338 million simulations run in client production environments.
Get the report
Discover more from PMN S.P.O.R.T.S - A PRIME MEDIA NETWORK BRAND
Subscribe to get the latest posts sent to your email.
