#thin-client-framework

Help Net Security1d agohigh

Exploitation attempts hit patched Oracle EBS flaw CVE-2026-101767

Unauthenticated SQL injection in EBS 12.2.3–12.2.15 can run commands as APPS; the fix shipped on October 20.