Exploitation attempts hit patched Oracle EBS flaw CVE-2026-101767
Unauthenticated SQL injection in EBS 12.2.3–12.2.15 can run commands as APPS; the fix shipped on October 20.
74
- Mentions · 7d4
- Mentions · 30d8
- All mentions14
- First seenAug 13, 2026
- Last mentioned1d ago
Timeline
14 articles · newest firstAttackers scan for patched Oracle E-Business Suite flaw CVE-2026-101767
Defused saw exploratory SQL-injection exploits on decoys on October 27; Oracle has not marked the bug exploited.
74
Exploratory probes hit patched Oracle EBS RCE CVE-2026-101767
Defused saw unauthenticated SQL-injection attempts against EBS decoys on October 27; customer breaches are not confirmed.
72
Attackers probe newly patched critical Oracle EBS flaw
Defused honeypots logged exploratory exploits of CVE-2026-101767 on October 27; no other in-the-wild reports are cited.
74
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
CISA says patch Ivanti Connect Secure CVE-2026-104935, exploited as a zero-day for unauthenticated command execution.
88
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are exploiting CVE-2026-102255, a CVSS 10 unauthenticated SSRF flaw in SonicWall SMA 1000 appliances.
86
SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin
Attackers are exploiting SonicWall SMA 1000 pre-auth SSRF CVE-2026-102255, a CVSS 10.0 flaw with no workaround.
88
Critical SonicWall Vulnerability Exploited Days After Disclosure
Attackers began exploiting critical SonicWall SMA1000 SSRF CVE-2026-102255 within two days of its October 6 disclosure.
86
Attackers plant remote access tools on compromised PaperCut servers
Attackers chained two PaperCut NG/MF zero-days for unauthenticated access, installing SimpleHelp and AnyDesk remote access tools on compromised servers.
78
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
ServiceNow patched four AI Platform flaws, including three pre-authentication CVSS 10.0 issues enabling unauthenticated code execution, SQL injection, and privilege escalation.
70
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
ReliaQuest details a bespoke JSP web shell that Clop deploys on hacked PTC Windchill and FlexPLM servers after exploiting CVE-2026-12569.
76
U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog
CISA adds actively exploited flaws in Microsoft IKE, SharePoint, VMware vCenter, and macOS Screen Sharing to KEV catalog, due August 21.
80
SharePoint CVE-2026-55040 Comes Under Attack Following Public Exploit
Attackers are actively exploiting critical SharePoint authentication bypass CVE-2026-55040 (CVSS 9.1) days after Rapid7 released a public PoC.
78
Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040)
Attackers use Rapid7's public PoC to exploit CVE-2026-55040, a critical SharePoint authentication bypass patched in July 2026.
84
Related CVEs
by mentions- CVE-2026-101767<1%9.8Missing authentication in Oracle E-Business Suite Application Object Library
- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
- CVE-2026-102255<1%10.0Pre-auth SSRF in SonicWall SMA1000 Work Place interface
- CVE-2026-3382477%9.8Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension
- CVE-2025-0282100%9.0Unauthenticated RCE in Ivanti Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2026-8157884%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2026-10493587%8.6Auth Bypass to Command Execution in Ivanti Connect Secure
- CVE-2024-21893100%8.2SSRF in Ivanti Connect Secure, Policy Secure, and Neurons SAML Component
- CVE-2026-18886<1%10.0Improper Access Control (Privilege Escalation) in ServiceNow AI Platform
- CVE-2026-68751%9.5Unauthenticated Remote Code Execution in ServiceNow AI Platform
Appears with
- Oraclevendor · 4
- Horizon3.aiorganization · 4
- Rapid7vendor · 4
- Oracle E-Business Suiteproduct · 3
- Microsoftvendor · 3
- CISAorganization · 3
- SonicWallvendor · 3
- Previdianorganization · 3
- Microsoftorganization · 2
- The Hacker Newsorganization · 2
- SMA 1000product · 2
- Defusedvendor · 2
- Shadowserverorganization · 2
- Rapid7organization · 2
- Federal Civilian Executive Branch agenciesvictim · 1
- E-Business Suiteproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.