Critical Oracle E-Business Suite Flaw Actively Exploited by Attackers

Attackers are actively exploiting CVE-2026-101767, a critical unauthenticated SQL injection vulnerability in Oracle E-Business Suite versions 12.2.3 through 12.2.15. This flaw, with a CVSS score of 9.8, can lead to remote code execution. Oracle has urged customers to apply the latest security patches immediately to protect against ongoing exploitation attempts and prevent potential system compromise.