RansomwarecriticalExploited in the wild

Oracle E-Business Suite Flaw CVE-2026

The Hacker Newsby @TheHackersNewsJun 30, 2026 · 11:37 UTC (Jun 30, 2026)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-46817 CVE-2025-61882 CVE-2026-35273

Tags: cve-2025-61882 cve-2026-35273 cve-2026-46817 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-61882	Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing	9.8	100%	KEVRansomware	Oct 5, 2025 KEV Oct 6, 2025
CVE-2026-35273	Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools	9.8	97%	KEVRansomwarePoC	Jun 11, 2026 KEV Jun 12, 2026
CVE-2026-46817	Unauthenticated Takeover of Oracle Payments in Oracle E-Business Suite (CVE-2026-46817)	9.8	12%	KEV	May 28, 2026 KEV Jul 15, 2026

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jun 30, 2026 Vulnerability / Enterprise Software A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber. The vulnerability, tracked as CVE-2026-46817 (CVSS score: 9. 8), refers to an improper privilege management and authentication flaw in Oracle Payments that could be abused to take over susceptible instances.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.