Intelligence online17 sources monitored10 actively exploited 7d31 published 24hChecked recently
Vulnerability record

CVE-2026-101767

CriticalNo known exploitation

Patch status

No official fix confirmed yet

Until a fix ships, follow the vendor's mitigations, limit exposure of affected systems, and watch this record for a patch.

Description

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdate

    CVE-2026-101767 scored CVSS 9.8

    Basis: NIST National Vulnerability Database

  2. Disclosed

    Hackers Start Probing Fresh Oracle EBS Vulnerability

    Basis: Reporting by SecurityWeek

Coverage

References

  • oracle.com https://www.oracle.com/security-alerts/cpuoct2026.html