Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)

T2Covered by 1 source · first reported by Help Net Security at 29 Oct, 13:12 UTC

Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw. “Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS’s Thin Client Framework servlet that chains to remote…