Exploitation attempts hit patched Oracle EBS flaw CVE-2026-101767
Unauthenticated SQL injection in EBS 12.2.3–12.2.15 can run commands as APPS; the fix shipped on October 20.
74
Product
Oracle E-Business Suite
- Mentions · 7d4
- Mentions · 30d10
- All mentions19
- First seenAug 19, 2026
- Last mentioned2d ago
Timeline
19 articles · newest firstAttackers probe Oracle E-Business Suite SQL injection flaw CVE-2026-101767
Decoys recorded exploratory exploits on October 27 against the unauthenticated TCF servlet flaw, which chains SQL injection to command execution as the EBS application account.
85
Attackers scan for patched Oracle E-Business Suite flaw CVE-2026-101767
Defused saw exploratory SQL-injection exploits on decoys on October 27; Oracle has not marked the bug exploited.
74
Exploratory probes hit patched Oracle EBS RCE CVE-2026-101767
Defused saw unauthenticated SQL-injection attempts against EBS decoys on October 27; customer breaches are not confirmed.
72
Oracle October update patches 1,295 flaws, six rated CVSS 10.0
Unauthenticated network bugs can take over E-Business Suite Workflow, SOA Suite, Access Manager, and JD Edwards Orchestrator.
72
Oracle October 2026 CPU lists flaws across dozens of products
The October 20 notice names JD Edwards, MySQL, Java SE, WebLogic, PeopleSoft and many other lines, without CVE details.
48
Oracle October 2026 CPU fixes unauthenticated E-Business Suite takeover bug
CVE-2026-101809 scores CVSS 10.0 in Workflow Notification Mailer 12.2.3–12.2.15; three other issues rate 9.8, with no confirmed exploitation.
76
Oracle October 2026 CPU issues 1,295 patches, including CVSS 9.8 flaws
Six hundred ninety patches are remotely exploitable without authentication, spanning database, middleware, Java and applications.
72
Oracle October 2026 CPU fixes 1209 CVEs in 1295 patches
112 updates are critical; Fusion Middleware has 206 patches, 134 remotely exploitable without authentication.
58
Oracle EBS flaw CVE-2026-101767 allows unauthenticated SQLi and RCE
Application Object Library 12.2.3 through 12.2.15 is fixed in Oracle's October 20, 2026 Critical Patch Update.
68
Argo-Bench: Evaluating Data Agents on Enterprise-Scale Workflows
Argo-Bench tests data agents on 210 enterprise tasks over a 7.5-billion-row simulated warehouse.
58
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
Roundup: ShinyHunters defaced Cl0p’s leak site, new secret-stealing implants emerged, and US water credentials were exposed.
74
ShinyHunters Claim Hack of Rival Ransomware Gang Clop
ShinyHunters hacked rival ransomware gang Clop, defacing its leak site and claiming to have stolen operational data and private keys.
70
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
ShinyHunters exploited a Grav CMS file upload flaw to breach and deface the Clop ransomware gang's leak site, claiming theft of source code, logs, and Tor private keys.
65
Oracle Corporation security advisory (AV26-929)
CCCS relays Oracle's September 2026 Critical Patch Update fixing vulnerabilities across WebLogic, Database, E-Business Suite, PeopleSoft, Siebel, and dozens more products.
40
Oracle’s September patches put Fusion Middleware back in the hot seat
Oracle's September 2026 CPU ships 673 patches including six CVSS 10.0 flaws in Fusion Middleware and Hyperion, none exploited in the wild.
65
Oracle Critical Security Patch Update, September 2026 Review
Oracle's September 2026 Critical Patch Update fixes 673 vulnerabilities, including 104 critical, with many remotely exploitable in E-Business Suite and Fusion Middleware.
55
Oracle Critical Security Update – 673 Vulnerabilities Patched Across Product Families
Oracle's September 2026 Critical Patch Update ships 673 patches across 17 product families, including 100+ critical and 240+ remotely exploitable flaws.
58
The long tail of Clop’s PTC hack is just beginning to emerge
Clop mass-exploited CVE-2026-12569 in PTC Windchill and FlexPLM in early June, claiming data theft from dozens of large organizations.
85
Related CVEs
by mentions- CVE-2026-101767<1%9.8Missing authentication in Oracle E-Business Suite Application Object Library
- CVE-2025-61882100%9.8Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing
- CVE-2026-10180910.0Unauthenticated Workflow takeover in Oracle E-Business Suite
- Missing authentication allows unauthenticated takeover of Oracle APEX
- CVE-2026-75803<1%9.1Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the…
- CVE-2026-7113310.0Unauthenticated Takeover Flaw in Oracle Access Manager Authentication Engine (CVSS 10.0)
- CVE-2026-8305910.0Unauthenticated LDAP Flaw Allows Full Takeover of Oracle Internet Directory
- Critical Flaw in Oracle Access Manager Authentication Engine Enables Full Compromise
- Unauthenticated Takeover Flaw in Oracle EBS Document Management and Collaboration
- High-Privilege Takeover Flaw in Oracle BI Publisher (BI Platform Security)
Appears with
- Oraclevendor · 18
- Oracle Fusion Middlewareproduct · 6
- Oracle Database Serverproduct · 6
- Oracle WebLogic Serverproduct · 3
- Horizon3.aiorganization · 3
- Clopthreat actor · 3
- ShinyHuntersthreat actor · 3
- Defusedorganization · 3
- Oracle Java SEproduct · 3
- Oracle MySQLproduct · 2
- Oracle Hyperionproduct · 2
- Oracle Access Managerproduct · 2
- CISAorganization · 2
- Cl0pthreat actor · 2
- Canadian Centre for Cyber Securityorganization · 2
- Tenableorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.