CVE-2026-101767

notes

Active exploitation begins against critical Oracle EBS SQL injection CVE-2026-101767

1. Executive summary Defused reported on 27 October 2026 that its Oracle E-Business Suite decoys recorded exploratory exploitation attempts against CVE-2026-101767, an unauthenticated

29 Oct 2026 · 7 min read read →

notes

ShinyHunters exploits Oracle PeopleSoft zero-day CVE-2026-35273 for RCE

1. Executive summary ShinyHunters (MITRE G1057) exploited CVE-2026-35273, a critical Oracle PeopleSoft flaw (CVSS 9.8, CWE-306), as a zero-day from as

28 Oct 2026 · 6 min read read →

notes

Hackers probe Oracle EBS SQL injection CVE-2026-101767 for RCE

1. Executive summary Attackers have begun probing CVE-2026-101767, an unauthenticated SQL injection in Oracle E-Business Suite that can be exploited for remote code

28 Oct 2026 · 5 min read read →