TECH NEWS

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

https://www.securityweek.com/wp-content/uploads/2025/10/Oracle-E-Business-Suite.jpeg

Threat actors have started exploiting a critical vulnerability in Oracle E-Business Suite (EBS), threat intelligence firm Defused warns.

Tracked as CVE-2026-46817 (CVSS score of 9.8), the issue was identified in the File Transmissions component of E-Business Suite’s Payments product.

According to Oracle, unauthenticated attackers can exploit the security defect over HTTP to compromise Payments.

“Successful attacks of this vulnerability can result in takeover of Oracle Payments,” Oracle notes.

CVE-2026-46817 was resolved in late May as part of Oracle’s first monthly Critical Security Patch Update (CSPU), which addressed 77 vulnerabilities.

On Monday, Defused warned that the first exploitation attempts against the critical flaw hit its EBS honeypots over the weekend.

Advertisement. Scroll to continue reading.

The threat intelligence company also points out that there have been no previous reports of the bug’s in-the-wild exploitation and that no public proof-of-concept (PoC) exploit targeting it exists either.

Given the vulnerability’s critical...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

Read more

https://static01.nyt.com/images/2026/06/30/multimedia/30Biz-Indonesia-Tycoon-pjfc/30Biz-Indonesia-Tycoon-pjfc-facebookJumbo.jpg

An Indonesian court sentences Gojek co-founder and ex-education minister Nadiem Makarim to 10 years in prison for power abuses over a Chromebook contract

Sponsor Posts Fast, affordable law for startups — Soxton automates startup legal so founders can move faster and sleep better. We handle incorporation, advisor, employment and commercial contracts. Join the waitlist for early access! Stop vibe coding analytics — Equals AI turns questions about your business into auditable spreadsheet models and dashboards.