CVE-2026-46817

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 29, 2026

Last Seen

October 21, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems74.6

In July 2026, several critical vulnerabilities were exploited, impacting SonicWall SMA1000 appliances and SharePoint servers. Two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410, were discovered in SonicWall appliances, allowing unauthenticated attackers to execute commands as root. Addi...

Oracle CSPU May 2026: 35 Critical Vulnerabilities Addressed72.0

Oracle released its first Critical Security Patch Update (CSPU) on May 28, 2026, addressing 35 vulnerabilities across multiple product families, including Oracle Database, Oracle REST Data Services, and Oracle E-Business Suite. Among these, CVE-2026-46840 and CVE-2026-34311 are rated critical, with...

Critical SQL Injection Flaw in Oracle E-Business Suite Disclosed70.5

Oracle has addressed CVE-2026-101767, a critical unauthenticated SQL injection vulnerability in the Oracle Application Object Library of Oracle E-Business Suite (EBS). The flaw, rated CVSS 3.1 9.8 (Critical), allows attackers with network access to exploit the EBS Thin Client Framework (TCF) servlet...

950 Oracle E-Business Suite Instances Exposed Amid Active Exploitation of CVE-2026-4681769.9

Approximately 950 Oracle E-Business Suite (EBS) instances have been exposed on the internet due to a critical vulnerability identified as CVE-2026-46817. The vulnerability was published on May 28, 2026, and active exploitation attempts have been observed since June 30, 2026. The Shadowserver Foundat...