CVE Tools
Track your stack

Hackers now exploit critical Oracle E-Business flaw in attacks

BleepingComputerBy Sergiu Gatlan

Reported exploitedOracle E-Business Suite

Our summary

Threat actors are actively exploiting a critical issue in Oracle E-Business Suite (EBS) that tracks as CVE-2026-46817. The weakness affects the File Transmission component within Oracle Payments and allows unauthenticated attackers with HTTP network access to take over vulnerable systems. Oracle has released fixes in its May 2026 Critical Security Patch Update, and the public exploitation increase makes prompt patching especially important for exposed EBS instances.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerOver 900 Oracle E-Business instances exposed to ongoing attacksCVE-2024-21182, CVE-2025-61882 +2
  2. The Hacker NewsOracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the WildCVE-2025-61882, CVE-2026-35273 +1
  3. The Hacker NewsThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesCVE-2026-35273, CVE-2026-46817
  4. BleepingComputerCISA orders feds to patch actively exploited Oracle flaw by SaturdayCVE-2024-21182, CVE-2026-46817
  5. Help Net SecurityOracle E-Business Suite Payments flaw under attack (CVE-2026-46817)CVE-2025-61882, CVE-2026-46817
  6. BleepingComputerShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacksCVE-2026-35273
  7. The Hacker NewsAttackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web ShellsCVE-2026-35273
  8. SecurityWeekShinyHunters Claims FBI Hack, Demands Retraction of Threat ReportCVE-2026-35273
  9. The Hacker NewsShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job ApplicantsCVE-2026-35273
  10. Dark ReadingShinyHunters Hacked Clop. Now What About Clop's Victims?CVE-2025-61882

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store