Threat Pulse 62High
Oracle E-Business Suite CVE-2026-101767 exploit attempts seen on decoys
Severity 6ActivereportedWeb servers and gateways

Defused says its Oracle EBS decoys recorded exploratory exploits against an unauthenticated SQL injection that chains to remote code execution.

What to do: Oct 29: More outlets confirm probing of Oracle EBS CVE-2026-101767 (CVSS 9.8, unauthenticated SQL injection to code execution); attempts hit decoys Oct 27. Still no confirmed compromises. Nov 2: Singapore CSA: attackers are targeting a critical flaw in Oracle Application Object Library (EBS), plus a second high-severity flaw; patch now.

· 8 days ago · @DefusedCyber on X
Sources@DefusedCyber on XSecurityWeekthehackernews.combleepingcomputer.comcsa.gov.sg
On X
@DefusedCyberverifiedOct 27, 15:15 UTC

🚨 Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS's Thin Client Framework servlet that chains to remote code execution, this morning, Oct 27. The bug was recently disclosed by

Open on X
@TheHackersNewsverifiedOct 28, 13:08 UTC

🚨 Hackers are probing a critical Oracle E-Business Suite vulnerability just days after it was patched. CVE-2026-101767 (CVSS 9.8) allows unauthenticated SQL injection that can lead to remote code execution. Exploit attempts were detected on decoy systems on

Open on X
@BleepinComputerverifiedOct 28, 12:20 UTC

Hackers now scanning systems for recently-patched Oracle flaw

Open on X
@SecurityWeekverifiedOct 28, 18:17 UTC

Hackers Start Probing Fresh Oracle EBS Vulnerability

Open on X
@CSAsingaporeverifiedNov 2, 10:35 UTC

Attackers are targeting a critical vulnerability in Oracle Application Object Library. A separate high-severity vulnerability also affects the product. Both could allow system takeover. Patch immediately. Details:

Open on X
Why this score

Plan rubric with caps (verified sweep, Oct 27)

Back to the board

Updated Nov 5, 01:47 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.