Active exploitation detected of critical Oracle E-Business Suite payment processing flaw

Summary

Threat intelligence firm Defused spotted six instances of exploitation of a critical Oracle E-Business Suite vulnerability (CVE-2026-46817, severity 9.8) in its payments processing feature during a two-hour window. Oracle had disclosed and patched the flaw in late March, but attackers are now actively exploiting it, potentially signaling the start of a broader campaign targeting the popular business application suite.

Source

bskyActive exploitation detected of critical Oracle E-Business Suite payment processing flawcyberscoop.com