Hackers Start Probing Fresh Oracle EBS Vulnerability

Threat intelligence firm Defused says attackers have begun scanning for a critical flaw in Oracle E-Business Suite just days after it was fixed. Tracked as CVE-2026-101767 with a CVSS score of 9.8, the bug is an SQL injection in the Application Object Library component that unauthenticated remote attackers can trigger over HTTP, potentially leading to full remote code execution and takeover of that module. Oracle addressed the issue in last week's October CPU, and Defused detected the first probing attempts against its EBS honeypots on October 27. The flaw was originally discovered and disclosed by Horizon3.ai, and so far no confirmed in-the-wild compromises have been reported beyond this scanning activity. Oracle EBS remains a frequent target—Defused flagged exploitation of another critical EBS bug, CVE-2026-46817, back in June, and the Cl0p group exploited separate EBS zero-days last year in a campaign that hit over 100 organizations worldwide.