Vulnerability

CVE-2026-101767 — Oracle Application Object Library authentication bypass

critical 9.8 2 stories · 2 outlets

Impacted if

Oracle Application Object Library ≤ 12.2.15

Authentication bypass · over the network · no login

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

First seen by AX-NEWS 28 Oct 2026, 09:14 UTC · latest story 28 Oct 2026, 12:48 UTC. Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Coverage

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
The Hacker News 28 Oct 2026, 12:48 UTC Cybersecurity

Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) , a…
Hackers Start Probing Fresh Oracle EBS Vulnerability
SecurityWeek 28 Oct 2026, 09:14 UTC Cybersecurity

CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek .