Hackers are beginning to scan for a recently patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence reporting from multiple outlets. The flaw is identified as CVE-2026-101767 and is described as highly severe, with a CVSS score of 9.8.
Oracle patched the vulnerability last week as part of its Critical Patch Update, and reporting indicates attackers are now looking for systems that remain unpatched. SecurityWeek characterises the issue as an unauthenticated SQL injection that can be exploited to achieve remote code execution.
Across the coverage, the common theme is the early-stage exploitation activity: probes are starting days after the vendor fix. Outlets differ mainly in emphasis—some highlight the scanning behaviour and exposure risk, while others focus on the specific vulnerability type and impact. Overall, the articles align on the CVE identifier, Oracle EBS scope, and the timing of Oracle’s patch.
