Hackers Start Probing Fresh Oracle EBS Vulnerability
Threat actors have started probing for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), threat intelligence firm Defused reports.
The exploited flaw, tracked as CVE-2026-101767 (CVSS score of 9.8), was patched last week in Oracle’s October CPU.
It is described as an SQL injection issue in the Application Object Library product of EBS that could be exploited by remote, unauthenticated attackers over HTTP.
Successful exploitation of the bug could allow attackers to achieve remote code execution (RCE) and completely take over the Application Object Library.
According to Defused, the first exploitation attempts targeting CVE-2026-101767 were observed on October 27.
“Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767 this morning, Oct 27,” the company warned on X.
Advertisement. Scroll to continue reading.
The security defect was discovered and reported by Horizon3.ai and there have been no other reports regarding its in-the-wild exploitation.
Oracle EBS vulnerabilities are...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
