950 Oracle E-Business Suite Instances Exposed as CVE-2026

Gbhackers •Divya • July 2, 2026

Around 950 internet-facing Oracle E-Business Suite (EBS) instances have been identified as exposed following enhanced scanning efforts. At the same time, active exploitation attempts tied to CVE-2026-46817 have already been observed in the wild. The findings were disclosed by The Shadowserver Foundation, which recently expanded its fingerprinting capabilities through domain-based scanning in collaboration with Validin. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

950 Oracle E-Business Suite Instances Exposed Amid Active Exploitation of CVE-2026-46817 Approximately 950 Oracle E-Business Suite (EBS) instances have been exposed on the internet due to a critical vulnerability identified as CVE-2026-46817. The vulnerability was published on May 28, 2026, and active exploitation attempts have been observed since June 30, 2026. The Shadowserver Foundation reported these findings, highlighting the risk to mission-critical ERP environments. The exposure is a result of enhanced scanning efforts, revealing that these instances are directly reachable by attackers. Organizations using Oracle EBS are urged to assess their systems and implement necessary security measures to mitigate risks. The situation remains critical as attackers are actively exploiting the vulnerability. 2 sources 70

Extracted Entities

950 Oracle E-Business Suite Instances Exposed as CVE-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)