Security1 hOctober 28, 2026, 16:14

Hackers Start Probing Fresh Oracle EBS Vulnerability

Threat intelligence firm Defused observed the first exploitation attempts on October 27 against CVE-2026-101767 (CVSS 9.8), a critical SQL injection in Oracle E-Business Suite's Application Object Library patched in Oracle's October CPU. The flaw lets remote unauthenticated attackers execute code and take over the component.

SecurityWeek

Open source

Hackers Start Probing Fresh Oracle EBS Vulnerability

CVE-2026-101767 carries a CVSS score of 9.8
First exploitation attempts seen on October 27
Flaw found by Horizon3.ai, patched in October CPU
SQL injection enables remote code execution and takeover

#Oracle#Defused#Horizon3.ai

Pwn2Own Ireland: hackers earn $1,262,000 for 98 zero-days

Security

Hackers Exploit Two Unpatched AhsayCBS Vulnerabilities in the Wild

Security

Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening

Security

Hackers Start Probing Fresh Oracle EBS Vulnerability

Pwn2Own Ireland: hackers earn $1,262,000 for 98 zero-days

Hackers Exploit Two Unpatched AhsayCBS Vulnerabilities in the Wild

Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening

Oracle Patches 800+ Vulnerabilities in September 2026 Security Update