Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

Summary: Defused Cyber reported active exploitation of CVE-2026-46817, a CVSS 9.8 improper privilege management and authentication flaw in Oracle Payments within Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. Oracle shipped patches in last month's Critical Security Patch Update, and Defused Cyber said it observed an actor exploiting the flaw on its Oracle E-Business honeypots over the weekend, with no known prior exploitation and no public proof-of-concept code.
Bottom line: An unauthenticated attacker with HTTP network access can take over Oracle Payments, and the same product's CVE-2025-61882 was weaponized by actors linked to the Cl0p ransomware operation - so unpatched E-Business Suite instances now sit in a known target path.

Read the original at The Hacker News ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2025-61882 CVE-2026-35273 CVE-2026-46817
Related: Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch Cyber Risks ·
New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login Cyber Risks ·
Shiny Hunters Exploits Oracle People Soft Zero-Day (CVE-2026-35273) to Breach Universities Cyber Risks ·