CVE Tools
Sign in
Back to feed
Exploited in the wild Oracle E-Business Suite rce Oracle web-app

Hackers now exploit critical Oracle E-Business flaw in attacks

BleepingComputer·By Sergiu Gatlan··2 min read
CVE Tools coverage

Threat actors are actively exploiting a critical issue in Oracle E-Business Suite (EBS) that tracks as CVE-2026-46817. The weakness affects the File Transmission component within Oracle Payments and allows unauthenticated attackers with HTTP network access to take over vulnerable systems. Oracle has released fixes in its May 2026 Critical Security Patch Update, and the public exploitation increase makes prompt patching especially important for exposed EBS instances.

Open on BleepingComputer

Related coverage

Other stories on the same CVEs
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure