Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Threat actors have begun probing for a newly patched critical vulnerability in Oracle E-Business Suite, according to threat intelligence firm Defused Cyber, The Hacker News reports. The flaw, CVE-2026-101767 (CVSS 9.8) in the Oracle Application Object Library, was patched by Oracle last week as part of its Critical Patch Update.