CVE-2026-101767

Everything Threat Times has reported about CVE-2026-101767: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Oracle Patches 1,295 Flaws in October 2026 Update, Including Critical E-Business Suite Bug

Threat TimesOct 21, 2026

Oracle’s October 2026 patch release addresses 1,295 security issues, featuring a CVSS 10.0 flaw in E-Business Suite allowing unauthenticated remote takeover.

Vulnerabilities

Horizon3 Researchers Expose Unauthenticated SQLi in Oracle E-Business Suite Servlet

Threat TimesOct 21, 2026

A critical flaw in Oracle E-Business Suite allows remote code execution via the TCF servlet without authentication, affecting versions 12.2.3 through 12.2.15.