Back Feeds.4Sysops

Critical Oracle E

Feeds.4Sysops •IT News • June 29, 2026

A critical security vulnerability in the Oracle E-Business Suite is currently being exploited by malicious actors. Tracked as CVE-2026-46817, the flaw resides in the File Transmission component of the Oracle Payments product. This vulnerability allows unauthenticated attackers with network access via HTTP to take over systems through low-complexity attacks. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle CSPU May 2026: 35 Critical Vulnerabilities Addressed Oracle released its first Critical Security Patch Update (CSPU) on May 28, 2026, addressing 35 vulnerabilities across multiple product families, including Oracle Database, Oracle REST Data Services, and Oracle E-Business Suite. Among these, CVE-2026-46840 and CVE-2026-34311 are rated critical, with CVSS scores of 10.0 and 9.8, respectively. Attackers can exploit several vulnerabilities remotely without authentication, posing significant risks to organizations using affected Oracle products. The CSPU is part of Oracle's new monthly update strategy, aimed at providing timely security fixes. Security professionals are urged to apply the patches immediately to mitigate risks associated with these vulnerabilities. The update follows a history of exploitation of Oracle vulnerabilities, emphasizing the need for prompt action. 68 sources 72

Extracted Entities

Critical Oracle E

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (2)