CriticalVulnerabilityOct 28, 2026

Hackers probe fresh Oracle EBS SQL injection flaw

An unauthenticated SQL injection vulnerability in Oracle EBS (CVE-2026-101767) is being actively probed by attackers. The flaw allows remote code execution without authentication. No patch availability or exploitation confirmation details were provided. Organizations running Oracle EBS should monitor for exploitation attempts and prioritize patch deployment when available.

Vulnerabilities

CVE-2026-101767 CVSS 9.8 EPSS 0.6%

Sources

SecurityWeekRead the original article
BleepingComputerRead the original article
The Hacker NewsRead the original article

AI-written summary. Check the original reporting before acting.