> TritonInfoSec News
Home / Jul 01, 2026 / Story
0
#3 The Hacker News general June 30, 2026 at 05:04 UTC

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

By [email protected] (The Hacker News)

AI Summary

CVE-2026-46817 (CVSS 9.8), an improper privilege management and authentication flaw in Oracle E-Business Suite's Payments module, is now being actively exploited in the wild according to Defused Cyber, allowing unauthenticated attackers to fully take over vulnerable instances. Organizations running Oracle E-Business Suite should treat this as an emergency patch given the ease of exploitation and active in-the-wild abuse.

Read full article → https://thehackernews.com/2026/06/oracle-e-busines…

Relevance score: 85.0/100

# More from July 01

  1. 1
    CISA: Windows BlueHammer flaw now exploited by ransomware gangs BleepingComputer
  2. 2
    Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer The Hacker News
  3. 4
    Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs The Hacker News
  4. 5
    US posts $10 million reward over Russian cyber campaign targeting Signal, WhatsApp The Record
  5. 6
    Aflac Japan Data Breach Impacts 4.38 Million SecurityWeek
  6. 7
    Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History SecurityWeek
  7. 8
    New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials The Hacker News
  8. 9
    Nissan Employee Data Breached in Oracle PeopleSoft Hack SecurityWeek
  9. 10
    GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks The Hacker News