securityweek.comarticleHackers Start Probing Fresh Oracle EBS Vulnerability
CVE-2026-101767 is a CVSS 9.8 unauthenticated SQL injection in the Application Object Library of Oracle E-Business Suite, patched in Oracle's October 2026 CPU and reported by Horizon3.ai. Defused decoys logged the first exploratory attempts on 27 October 2026, and the flaw could lead to remote code execution. The article recalls CVE-2026-46817 attacks in June and last year's Cl0p zero-day campaign against EBS.
TL;DR Defused honeypots saw exploitation attempts on 27 October 2026 against the newly patched critical Oracle EBS SQLi CVE-2026-101767.
Organisations named here
- Defused
CVEs named here
- CVE-2026-46817
- CVE-2026-101767
Technologies named here
- Defused
- Oracle E-Business Suite
- CVSS
- Horizon3.ai
Techniques named here
- Decoy monitoring to detect exploitation attempts
- SQL injection
- Remote code execution
Threat actors named here
- Cl0p
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup