CVE-2026-101767
9.8CVSS base score · critical (NVD)
0.6%Chance of exploitation in the next 30 days (FIRST EPSS)
Not in KEVNo confirmed exploitation in CISA's catalog yet
What happened
An unauthenticated SQL injection vulnerability in Oracle EBS (CVE-2026-101767) is being actively probed by attackers. The flaw allows remote code execution without authentication. No patch availability or exploitation confirmation details were provided. Organizations running Oracle EBS should monitor for exploitation attempts and prioritize patch deployment when available.
From the Intel60 brief of Oct 28, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalHackers probe fresh Oracle EBS SQL injection flawOct 28, 2026