Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Security researchers discovered a critical unauthenticated SQL injection vulnerability (CVE-2026-101767) in Oracle E-Business Suite's Thin Client Framework, allowing remote code execution. Oracle patched it last week, but threat actors began probing the flaw shortly after. Users are urged to apply the patch or implement recommended workarounds to prevent exploitation.