# Attackers probe Oracle E-Business Suite flaw patched on October 20

_Published Wednesday, October 28, 2026 at 8:52 AM EDT · Security · Latest · Tier 2 — Notable_

![Attackers probe Oracle E-Business Suite flaw patched on October 20 — Primary](https://www.bleepstatic.com/content/hl-images/2026/10/28/Oracle-headpic.jpg)

Threat intelligence company Defused said it detected exploratory exploits against Oracle E-Business Suite vulnerability CVE-2026-101767 on October 27. The flaw allows unauthenticated attackers with HTTP access to take over vulnerable systems, BleepingComputer reported.

Oracle released patches on October 20. Defused describes an SQL injection that can lead to remote code execution. Shadowserver tracks over 670 internet-exposed EBS instances, but its count does not establish how many remain vulnerable. Oracle has not marked this flaw as exploited in the wild.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-now-scanning-systems-for-recently-patched-oracle-flaw/)

---
Canonical: https://techandbusiness.org/newswire/OFyC7Onqd3al06GZ6OIcCE
Published: 2026-10-28T12:52:03.842Z
Story chronology: 2026-10-27T00:00:00.000Z
Retrieved: 2026-10-28T14:57:49.285Z
Publisher: Tech & Business (techandbusiness.org)