ChordNews
← All news

Attackers begin probing for unpatched Oracle E-Business Suite flaw

By ChordNews · First written (updated )

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Image: thehackernews.com
Comments 0

Summary

Attackers have started probing the internet for systems that have not yet patched a recently disclosed critical vulnerability in Oracle E-Business Suite (EBS), according to BleepingComputer. The Hacker News, citing threat intelligence firm Defused Cyber, reports that threat actors are beginning to probe for the newly patched flaw, tracked as CVE-2026-101767 with a CVSS score of 9.8. The flaw is an improper authentication issue in the Oracle Application Object Library component of EBS, and Oracle patched it last week as part of its Critical Patch Update.

Later: Attackers Exploit Critical Drupal Commerce Core Authorization Flaw · Attackers Target Unpatched Maximum-Severity CryptoPayment Gateway WordPress Plugin Flaw

Timeline

  1. BleepingComputer

    Source ↗

    BleepingComputer reports that attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite vulnerability.

  2. The Hacker News

    Source ↗

    The Hacker News reports, citing Defused Cyber, that threat actors are beginning to probe for the newly patched critical Oracle E-Business Suite flaw CVE-2026-101767 (CVSS 9.8) in the Oracle Application Object Library, which Oracle patched last week in its Critical Patch Update.

Comments

No comments yet.

    to like and comment.

    © 2026 ChordNews