# Defused Cyber detects exploit probes against newly patched Oracle EBS flaw

_Published Wednesday, October 28, 2026 at 4:08 PM EDT · Security · Latest · Tier 2 — Notable_

![Defused Cyber detects exploit probes against newly patched Oracle EBS flaw — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBB03AGS7veiAqQ7-xPeadzhhaRvDmhOlLgQcDN0y-r1na_us5yomWjBEXCbwbw8OW_o8SSGjjqk4VZFQ4ZxLiWKQPZxlcBkzJ5lv3OlEV0rOETUKyQzWoZ74LGpSjOjrScmk1rVf0OhRmDACHG3jwSDfBnnta75I_3s_nuoWGZmcfg7NZfHBp_PEIl8aj/s1700-nu-rw-lo-l85-e365/oracle-hack.jpg)

Defused Cyber said its Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767 on October 27. Oracle patched the critical vulnerability last week; it carries a CVSS score of 9.8.

Horizon3.ai says an unauthenticated attacker who can reach the affected servlet can execute database queries as the APPS user, then run operating-system commands as the EBS application account. Accessible data may include financial, payroll, HR and procurement records. Internet-facing deployments face the greatest risk, but internal systems are also exposed when an attacker can reach the servlet from another compromised system or network segment.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html)

---
Canonical: https://techandbusiness.org/newswire/MXw-HjNmuhmUlC87iyVhRU
Published: 2026-10-28T20:08:04.700Z
Story chronology: 2026-10-27T00:00:00.000Z
Retrieved: 2026-10-28T23:13:15.428Z
Publisher: Tech & Business (techandbusiness.org)