Back thehackernews.com

CVE-2025-3248

thehackernews.com • June 30, 2026

Learn how to uncover hidden AI use, see what data it can access, map every AI action to a human owner, and apply practical governance without heavy infrastructure changes.

Learn how to contain Mythos-style AI attacks with practical Zero Trust controls that reduce exposure, stop lateral movement, and limit risk.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in AI and Oracle E-Business Suite Exposed Two critical vulnerabilities have been reported, CVE-2025-3248 and CVE-2026-33017, affecting AI systems and Oracle E-Business Suite respectively. CVE-2025-3248 was published on April 7, 2025, and added to CISA KEV for active exploitation on May 5, 2025. This vulnerability allows attackers to exploit AI systems, potentially leading to unauthorized access and data breaches. The Oracle E-Business Suite flaw, CVE-2026, was reported on June 30, 2026, but specific details on its impact and exploitation are still emerging. Organizations using these systems are advised to review their security measures and implement Zero Trust controls to mitigate risks. The scope of the impact remains significant, particularly for enterprises relying on these technologies. Both vulnerabilities highlight the ongoing challenges in securing AI and enterprise software environments. 1 sources 67

Extracted Entities

CVEs (1)

CVE-2025-3248