Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Threat actors are actively probing a newly patched critical vulnerability in Oracle E-Business Suite (EBS), tracked as CVE-2026-101767 with a CVSS score of 9.8. The flaw resides in the Oracle Application Object Library component. Oracle patched it as part of its latest Critical Patch Update. Threat intelligence firm Defused Cyber reported the exploitation attempts began shortly after the patch was released. The rapid targeting of this vulnerability highlights the risk of delayed patching in enterprise environments. The high CVSS score indicates the potential for remote code execution without authentication. Organizations running Oracle EBS are urged to apply the patch immediately.