Critical Vulnerabilities (CVE-2026-101767, CVE-2026-101700) Disclosed in Oracle Application Object Library

Oracle has released security updates to address two critical vulnerabilities in its Application Object Library (versions 12.2.3 through 12.2.15). CVE-2026-101767, with a CVSS score of 9.8, and CVE-2026-101700, with a score of 8.1, could allow an unauthenticated remote attacker to take over affected systems via HTTP. Exploitation attempts targeting CVE-2026-101767 have reportedly been observed in the wild, urging immediate patching.