Threat actors have started scanning the internet for systems vulnerable to a critical Oracle E-Business Suite flaw. The vulnerability, tracked as CVE-2026-101767, allows unauthenticated attackers to execute remote code via SQL injection. Oracle released a security patch on October 20, 2026, urging immediate application to prevent system takeover. Defused reported observing exploratory exploits against the flaw on October 27, 2026. Shadowserver currently tracks over 670 internet-exposed instances of the software, many located in the United States.
Read the full story at bleepingcomputer.com.
Photo: unknown (CC0) via Openverse
