InfoSecBulletin Cybersecurity for mankind
Attackers are now using a flaw (called CVE-2026-46817) in the Oracle E-Business Suite (EBS) financial app, according to the security firm Defused. This security issue was discovered in the File Transmission part of EBS’s Oracle Payments product. It allows hackers without authentication and with HTTP network access to take over weak systems using simple attacks.
Oracle issued security updates to fix a weakness in its May 2026 Critical Security Patch Update and asked customers to update their systems right away.
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
WinRAR, WordPress RCE flaw & Zyxel GS1900 Zero-Day exploited in the wild
Daily Cyber security update for 04.11. 2026
Daily Cyber security update for 03.11. 2026
Using ARTEX AI, Hacker to attack 200 Organizations Across 14 Countries
Amadeus cyber incident impacted “Cathay Pacific, Qantas, Japan, Malaysia, Korean & Asiana” Airlines
“Oracle continues to periodically receive reports of attempts to maliciously exploit vulnerabilities for which Oracle has already released security patches,” the company warned at the time.
“In some instances, it has been reported that attackers have been successful because targeted customers had failed to apply available Oracle patches. Oracle therefore strongly recommends that customers remain on actively-supported versions and apply security patches without delay.”
While Oracle has not yet said that the CVE-2026-46817 flaw is being used by attackers, Defused mentioned on Monday that attackers are now using it, with the first attempts seen over the weekend.
“CVE-2026-46817 (CVSS 9.8 unauth HTTP takeover in Oracle E-Business) is being exploited. Over the weekend, we observed an actor exploiting the vulnerability on our Oracle E-Business honeypots. This vulnerability has no known previous exploitation and no public POC code exists,” it warned.
The internet safety group Shadowserver is now watching over 450 Oracle EBS systems that are exposed online, with almost 200 located in the United States and Europe.
There is no information on how many are protected from these attacks.
Earlier this month, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) reported a serious flaw with Oracle WebLogic Server (CVE-2024-21182) that was fixed two years ago but is still being used in attacks.
Weeks later, the company fixed a serious PeopleSoft Suite zero-day flaw (CVE-2026-35273). This flaw was being used in ShinyHunter data theft attacks and let attackers run code from afar without needing to log in.
