Critical Vulnerabilities in AI and Oracle E-Business Suite Exposed

• •CVE-2025-3248 is actively exploited, allowing unauthorized access to AI systems.
• •CVE-2026 affects Oracle E-Business Suite, with details on exploitation still emerging.
• •Organizations are urged to implement Zero Trust controls to mitigate risks.

Two critical vulnerabilities have been reported, CVE-2025-3248 and CVE-2026-33017, affecting AI systems and Oracle E-Business Suite respectively. CVE-2025-3248 was published on April 7, 2025, and added to CISA KEV for active exploitation on May 5, 2025. This vulnerability allows attackers to exploit AI systems, potentially leading to unauthorized access and data breaches. The Oracle E-Business Suite flaw, CVE-2026, was reported on June 30, 2026, but specific details on its impact and exploitation are still emerging. Organizations using these systems are advised to review their security measures and implement Zero Trust controls to mitigate risks. The scope of the impact remains significant, particularly for enterprises relying on these technologies. Both vulnerabilities highlight the ongoing challenges in securing AI and enterprise software environments.