CVE-2026-101767: Threat actors probe critical Oracle E-Business Suite RCE flaw

# CVE-2026-101767: Threat actors probe critical Oracle E-Business Suite RCE flaw

https://gcdradar.vercel.app/incidents/cve-2026-101767-threat-actors-probe-critical-oracle-e-busine · AIR-2026-1611 · closed 2026-11-12

- Lane: Patch now
- Severity: 3 (Confirmed exploitation): Critical vulnerability with active probing in the wild.
- Fix status: Patched
- First reported: 2026-10-28 (happened 2026-10)
- AI role: No AI role
- Products: Oracle E-Business Suite
- CVE ids: CVE-2026-101767
- CVSS: 9.8

## Summary

Threat actors are probing for a critical remote code execution vulnerability in the Oracle Application Object Library of Oracle E-Business Suite. Oracle patched the flaw as part of its Critical Patch Update shortly before active scanning began.

## What to do

Apply the latest Oracle Critical Patch Update immediately.

## Affected and fixed versions

- Affected: Oracle Application Object Library

## Latest updates

- 2026-10-28: Hackers now scanning systems for recently-patched Oracle flaw (https://bleepingcomputer.com/news/security/hackers-now-scanning-systems-for-recently-patched-oracle-flaw)
- 2026-10-28: Hackers Start Probing Fresh Oracle EBS Vulnerability (https://securityweek.com/hackers-start-probing-fresh-oracle-ebs-vulnerability)
- 2026-10-28: Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch (https://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html)

## Sources

- 2026-10-28 The Hacker News: Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch https://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html
- 2026-10-28 SecurityWeek: Hackers Start Probing Fresh Oracle EBS Vulnerability https://securityweek.com/hackers-start-probing-fresh-oracle-ebs-vulnerability
- 2026-10-28 BleepingComputer: Hackers now scanning systems for recently-patched Oracle flaw https://bleepingcomputer.com/news/security/hackers-now-scanning-systems-for-recently-patched-oracle-flaw
- 2026-10-29 Help Net Security: Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767) https://helpnetsecurity.com/2026/10/29/oracle-e-business-suite-cve-2026-101767-exploitation

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.