Zaifliklar
Xakerlar Oracle EBS'dagi yangi zaiflikni tekshirishni boshladi
CVE-2026-101767 — autentifikatsiyasiz SQL in'ektsiyasi bo'lib, u masofaviy kod bajarish (RCE) uchun ishlatilishi mumkin.
Muallif
Ionut Arghire
| 28-oktabr, 2026 (ET bo'yicha 5:14)
Tahdid aktorlari Oracle E-Business Suite (EBS) dagi yangi tuzatilgan muhim zaiflikni tekshirishni boshladi, deb xabar beradi Defused tahdid razvedkasi firmasi.
Foydalanilayotgan zaiflik, CVE-2026-101767 (CVSS balli 9,8) sifatida kuzatilmoqda, o'tgan hafta Oracle'ning oktyabr CPU'sida tuzatildi.
U EBS'ning Application Object Library mahsulotidagi SQL in'ektsiyasi muammosi sifatida tavsiflanadi, uni masofaviy, autentifikatsiyasiz hujumchilar HTTP orqali ishlatishi mumkin.
Xatolikni muvaffaqiyatli ishlatish hujumchilarga masofaviy kod bajarish (RCE) imkonini berishi va Application Object Library'ni to'liq nazoratga olishiga olib kelishi mumkin.
Defused ma'lumotlariga ko'ra, CVE-2026-101767'ni nishonga olgan birinchi ekspluatatsiya urinishlari 27-oktabrda kuzatildi.
"Bizning Oracle E-Business Suite tuzoqlarimiz bu tongda, 27-oktabrda, CVE-2026-101767'ga qarshi tekshiruv ekspluatatsiyalarini qayd etdi," deb ogohlantirdi kompaniya X'da.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
Xavfsizlik nuqsoni Horizon3.ai tomonidan aniqlangan va xabar qilingan, va uning real dunyoda ishlatilishi haqida boshqa xabarlar yo'q.
Oracle EBS zaifliklari ko'pincha tahdid aktorlari tomonidan nishonga olinadi. Iyun oyida Defused E-Business Suite'ning Payments mahsulotidagi File Transmissions komponentidagi muhim muammo — CVE-2026-46817 — ekspluatatsiya qilinayotgan hujumlar haqida ogohlantirgan edi.
O'tgan yili Cl0p ransomware va tovlamachilik guruhi Oracle'ning korporativ boshqaruv dasturidagi nol kun xatoliklarini ishlatib, saqlangan ma'lumotlarga kirishgan.
Katta miqyosdagi EBS xakerlik kampaniyasi iste'mol tovarlari, energetika, muhandislik, ko'ngilochar, moliya, og'ir sanoat, ishlab chiqarish, media, dasturiy ta'minot, texnologiya, telekommunikatsiya va boshqa sohalardagi 100 dan ortiq tashkilotlarga ta'sir qilishi mumkin edi.
Bog'liq: CISA Node2Shell ekspluatatsiyasi haqida ogohlantirmoqda, honeypotlar hujum urinishlarini qayd etmoqda
Bog'liq: Tailscale "Tailworm" zaifliklarining muvofiqlashtirilmagan oshkor etilishidan so'ng tezda tuzatishlar chiqaradi
Bog'liq: HPE tarmoq mahsulotlaridagi o'nlab muhim zaifliklarni tuzatadi
Bog'liq: iOS, macOS 27.2 286 xatolikni tuzatadi; ekspluatatsiya qilingan zaiflik iOS 18'ga orqaga ko'chirildi
Yozgan: Ionut Arghire
Ionut Arghire — SecurityWeek uchun xalqaro muxbir.
Kundalik xabarnoma
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta xabarnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghire'dan ko'proq
- Dead Popcorn Time yangilovchisi millionlab kompyuterlarni nazoratga olish xavfiga duchor qildi
- Genesys xakerligi ichki tizimlardan mijoz ma'lumotlarini fosh qildi
- 953 onlayn do'kon uzoq davom etgan zararli dastur kampaniyasida zararlangan
- Golland politsiyasi bank hisoblaridan 400 000 dollardan ortiq pulni o'g'irlagan NFC relay hujumlari bo'yicha ikkita shaxsni hibsga oldi
- Mythos 5 iyul hujumida real dunyo zararini e'tiborsiz qoldirdi
- Xitoy APT ConnectWise hujumlarida AI pentest vositasi Artex'dan foydalanadi
- Hujumchilar to'rt oy ichida uchinchi Arista VCO nol kun zaifligini ishlatmoqda
- Capcom ma'lumotlar buzilishidan 11 million kishi ta'sirlandi
So'nggi yangiliklar
- CISA Node2Shell ekspluatatsiyasi haqida ogohlantirmoqda, honeypotlar hujum urinishlarini qayd etmoqda
- Tailscale "Tailworm" zaifliklarining muvofiqlashtirilmagan oshkor etilishidan so'ng tezda tuzatishlar chiqaradi
- Sotuvchi kalitining sizib chiqishi 238 000 Denver Health Plan a'zolarining ma'lumotlarini xavf ostiga qo'yadi
- HPE tarmoq mahsulotlaridagi o'nlab muhim zaifliklarni tuzatadi
- Tushunarsiz DreamHost hodisasi elektron pochta, FTP parollarini qayta o'rnatishga majbur qildi
- iOS, macOS 27.2 286 xatolikni tuzatadi; ekspluatatsiya qilingan zaiflik iOS 18'ga orqaga ko'chirildi
- Anthropic investorlar uchun xavflar ro'yxati, jumladan, nazoratsiz AI'dan kelib chiqishi mumkin bo'lgan zararlar
- Bu normal: NetScaler nol kunlari yangi normal haqida nima aytadi
Trend
Node2Shell: Brotli zaifligi Microsoft, Node.js, Python paketlarida tuzatishlarni keltirib chiqardi
PHP2Shell ekspluatatsiyasi tekshiruvlardan ishlaydigan shell'larga o'tdi
Genesys xakerligi ichki tizimlardan mijoz ma'lumotlarini fosh qildi
iOS, macOS 27.2 286 xatolikni tuzatadi; ekspluatatsiya qilingan zaiflik iOS 18'ga orqaga ko'chirildi
Golland politsiyasi bank hisoblaridan 400 000 dollardan ortiq pulni o'g'irlagan NFC relay hujumlari bo'yicha ikkita shaxsni hibsga oldi
Kiberxavfsizlik muammosi yirik Nyu-Meksiko shifoxonasini bemorlarni boshqa joyga yo'naltirishga va klinikalarni yopishga majbur qildi
Tailscale "Tailworm" zaifliklarining muvofiqlashtirilmagan oshkor etilishidan so'ng tezda tuzatishlar chiqaradi
953 onlayn do'kon uzoq davom etgan zararli dastur kampaniyasida zararlangan
Kundalik xabarnoma
So'nggi tahdidlar, tendentsiyalar va texnologiya haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek elektron pochta xabarnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Sizning Google Workspace'dagi AI kirish xavfi allaqachon mavjud
19-oktabr, 2026
Google Workspace'ga ulangan AI vositalari millionlab nozik elektron pochta va fayllarga kirishi mumkin. Tashkilotingizning xavfini aniqlash va AI kirishini boshqarish uchun ramka o'rganish uchun ushbu sessiyaga qo'shiling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 Summit
10 va 11-noyabr, 2026
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiruvchi masalalarni ko'rib chiqish uchun birlashtirganimizda bizga qo'shiling.
Ro'yxatdan o'ting
Harakatdagi odamlar
Noma Security Bobby Shoker'ni CFO va Alberto Rodrigues'ni CCO etib tayinladi.
Neo Scott Stout'ni CRO etib tayinladi.
CISA Kan Wang'ni CFO va Khoi Nguyen'ni CAE etib qasamyod qildi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
Bu normal: NetScaler nol kunlari yangi normal haqida nima aytadi
Yaqin orada Citrix NetScaler tuzatishlarining yana bir to'plami chiqarilishi mumkinligi uchun tuzatish boshqaruv quvurlaringizni tayyor saqlang. (Tod Beardsley)
Zamonaviy kiberhujumlarga qarshi kurashda kalit tezlik emas, balki yetuklik
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir qiladi. (Matias Madou)
Kontekst zamonaviy kiberhujumlarga qarshi kurashda qirol
Kontekstual mudofaa xavfsizlik jamoalariga signallarni bog'lash, keyingi qadamni oldindan ko'rish va tahdidlarni ular kuchayishidan oldin to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaiflikni aniqlash va ekspluatatsiyani tezlashtirgan sari, virtual tuzatish hali ham mudofaa chuqurligi va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Kelajak uchun katta rejalar tuzgan to'rtta kiber tahdid
- AI, ta'minot zanjiri ta'siri, kvant hisoblash va geosiyosiy ziddiyat xavfsizlik dasturlarini sinovdan o'tkazmoqda. Buzilishlarga tayyorgarlik kundalik operatsiyalarning bir qismiga aylanishi kerak. (Steve Durbin)
Vulnerabilities
Hackers Start Probing Fresh Oracle EBS Vulnerability
CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.
By
Ionut Arghire
| October 28, 2026 (5:14 AM ET)
*
Threat actors have started probing for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), threat intelligence firm Defused reports.
The exploited flaw, tracked as CVE-2026-101767 (CVSS score of 9.8), was patched last week in Oracle’s October CPU.
It is described as an SQL injection issue in the Application Object Library product of EBS that could be exploited by remote, unauthenticated attackers over HTTP.
Successful exploitation of the bug could allow attackers to achieve remote code execution (RCE) and completely take over the Application Object Library.
According to Defused, the first exploitation attempts targeting CVE-2026-101767 were observed on October 27.
“Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767 this morning, Oct 27,” the company warned on X.
Advertisement. Scroll to continue reading.
The security defect was discovered and reported by Horizon3.ai and there have been no other reports regarding its in-the-wild exploitation.
Oracle EBS vulnerabilities are often targeted by threat actors. In June, Defused warned of attacks exploiting CVE-2026-46817, a critical issue in the File Transmissions component of E-Business Suite’s Payments product.
Last year, the Cl0p ransomware and extortion group exploited zero-day bugs in Oracle’s enterprise management software to access stored data.
The large-scale EBS hacking campaign potentially impacted over 100 organizations across consumer goods, energy, engineering, entertainment, finance, heavy industry, manufacturing, media, software, technology, telecommunications, and other industries.
Related:CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
Related:Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Related:HPE Patches Dozens of Critical Flaws in Networking Products
Related:iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
- Genesys Hack Exposes Customer Data From Internal Systems
- 953 Online Stores Infected in Long-Lasting Malware Campaign
- Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
- Mythos 5 Ignored Real-World Harm in July Attack
- China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
- Attackers Exploit Third Arista VCO Zero-Day in Four Months
- 11 Million Impacted by Capcom Data Breach
Latest News
- CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
- Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
- Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
- HPE Patches Dozens of Critical Flaws in Networking Products
- Unexplained DreamHost Incident Prompts Email, FTP Password Resets
- iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
- Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI
- This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Trending
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
PHP2Shell Exploitation Moves From Probes to Working Shells
Genesys Hack Exposes Customer Data From Internal Systems
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
953 Online Stores Infected in Long-Lasting Malware Campaign
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: The AI Access Risk Already in Your Google Workspace
October 19, 2026
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Noma Security has named Bobby Shoker as CFO and Alberto Rodrigues as CCO.
Neo has appointed Scott Stout as CRO.
CISA has sworn in Kan Wang as CFO and Khoi Nguyen as CAE.
More People On The Move
Expert Insights
*
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)