CVE Tools
Track your stack

Over 900 Oracle E-Business instances exposed to ongoing attacks

BleepingComputerBy Sergiu Gatlan

Reported exploitedOracle E-Business SuiteOracle Payments

Our summary

More than 900 Oracle E-Business Suite (EBS) instances are reportedly reachable online while attackers are actively targeting a critical issue, CVE-2026-46817, in the File Transmission component of Oracle Payments. The flaw can be abused by unauthenticated attackers with HTTP network access to take over vulnerable systems through low-complexity techniques, making exposure particularly risky for exposed deployments. Oracle has released fixes in its May 2026 Critical Security Patch Update, and defenders are urged to patch immediately as scanners such as Shadowserver continue to observe a large number of potentially vulnerable installations.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerHackers now exploit critical Oracle E-Business flaw in attacksCVE-2024-21182, CVE-2025-61882 +2
  2. The Hacker NewsOracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the WildCVE-2025-61882, CVE-2026-35273 +1
  3. The Hacker NewsThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesCVE-2026-35273, CVE-2026-46817
  4. BleepingComputerCISA orders feds to patch actively exploited Oracle flaw by SaturdayCVE-2024-21182, CVE-2026-46817
  5. Help Net SecurityOracle E-Business Suite Payments flaw under attack (CVE-2026-46817)CVE-2025-61882, CVE-2026-46817
  6. BleepingComputerShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacksCVE-2026-35273
  7. The Hacker NewsAttackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web ShellsCVE-2026-35273
  8. SecurityWeekShinyHunters Claims FBI Hack, Demands Retraction of Threat ReportCVE-2026-35273
  9. The Hacker NewsShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job ApplicantsCVE-2026-35273
  10. Dark ReadingShinyHunters Hacked Clop. Now What About Clop's Victims?CVE-2025-61882

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store