950 Oracle E-Business Suite Instances Exposed Amid Active Exploitation of CVE-2026-46817

• •Around 950 Oracle E-Business Suite instances are exposed on the internet.
• •CVE-2026-46817 is actively being exploited, with attempts observed in the wild.
• •Organizations using Oracle EBS must take immediate action to secure their systems.

Approximately 950 Oracle E-Business Suite (EBS) instances have been exposed on the internet due to a critical vulnerability identified as CVE-2026-46817. The vulnerability was published on May 28, 2026, and active exploitation attempts have been observed since June 30, 2026. The Shadowserver Foundation reported these findings, highlighting the risk to mission-critical ERP environments. The exposure is a result of enhanced scanning efforts, revealing that these instances are directly reachable by attackers. Organizations using Oracle EBS are urged to assess their systems and implement necessary security measures to mitigate risks. The situation remains critical as attackers are actively exploiting the vulnerability.