Over 900 Oracle E-Business instances exposed to ongoing attacks
Due to persistent attacks that take advantage of a serious security vulnerability, more than 900 Oracle E-Business Suite (EBS) systems have been discovered exposed online.
The File Transmission component of EBS's Oracle Payments product has a vulnerability (recorded as CVE-2026-46817) that enables malicious actors with HTTP network access and no rights to take over susceptible computers through simple assaults.
As part of its May 2026 Critical Security Patch Update, Oracle fixed this vulnerability and advised users to update their computers right away.
Threat intelligence firm Defused warned on Monday that threat actors are now actively exploiting this vulnerability, with the first attempts discovered over the weekend, even though the company has not yet reported it as being expl...