> TritonInfoSec News
Home / Oct 29, 2026 / Story
0
#5 The Hacker News general October 28, 2026 at 12:48 UTC

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

By [email protected] (The Hacker News)

AI Summary

Threat actors began probing for CVE-2026-101767 (CVSS 9.8), an unauthenticated SQL injection enabling remote code execution in Oracle E-Business Suite's Application Object Library, within days of Oracle's Critical Patch Update. Threat intelligence firm Defused Cyber confirmed active scanning is underway, making immediate patching critical for the large installed base of Oracle EBS deployments.

Read full article → https://thehackernews.com/2026/10/hackers-target-c…

Relevance score: 83.0/100

# More from October 29

  1. 1
    Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns The Hacker News
  2. 2
    Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win The Hacker News
  3. 3
    Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges The Hacker News
  4. 4
    ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws The Hacker News
  5. 6
    Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers The Hacker News
  6. 7
    PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network The Hacker News
  7. 8
    Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass The Hacker News
  8. 9
    Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers The Hacker News
  9. 10
    Chrome and Firefox Updates Patch Over 200 Vulnerabilities SecurityWeek