CVE Tools
Track your stack

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

SecurityWeekBy Ionut Arghire

Reported exploitedOracle E-Business SuiteOracle Payments

Our summary

Threat actors have begun targeting a critical Oracle E-Business Suite (EBS) vulnerability tracked as CVE-2026-46817 (CVSS 9.8), with activity observed against the File Transmissions component in the Payments product. Oracle says unauthenticated attackers can exploit the issue over HTTP to take over Oracle Payments, making it a high-impact risk for organizations running EBS. The flaw was addressed in Oracle’s first monthly Critical Security Patch Update (CSPU) in late May, so defenders should prioritize patching to reduce exposure.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker NewsThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesCVE-2026-46817
  2. BleepingComputerCISA orders feds to patch actively exploited Oracle flaw by SaturdayCVE-2026-46817
  3. Check Point Research6th July – Threat Intelligence ReportCVE-2026-46817
  4. Help Net SecurityWeek in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attackCVE-2026-46817
  5. BleepingComputerOver 900 Oracle E-Business instances exposed to ongoing attacksCVE-2026-46817
  6. Help Net SecurityOracle E-Business Suite Payments flaw under attack (CVE-2026-46817)CVE-2026-46817
  7. The Hacker NewsOracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the WildCVE-2026-46817
  8. BleepingComputerHackers now exploit critical Oracle E-Business flaw in attacksCVE-2026-46817

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store