importantSYS.SOURCE: The Hacker News• 2026-10-28T18:18:03+05:30
Critical Oracle E-Business Suite RCE Vulnerability Exploited Post-Patch
Threat actors are actively exploiting CVE-2026-101767, a critical remote code execution vulnerability in Oracle E-Business Suite, just days after Oracle released a patch. The flaw, rated 9.8/10 on CVSS, stems from improper authentication in the Oracle Application Object Library.
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber.
The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) , a case of improper authentication in the Oracle Application Object Library of Oracle E-Business Suite. It was patched by Oracle last week as part of its Critical
*** END OF TRANSMISSION ***