Hackers now scanning systems for recently patched Oracle flaw

Attackers have begun scanning the Internet for systems that remain unpatched against a recently disclosed critical Oracle E-Business Suite vulnerability. Defused reported exploratory exploits observed in Oracle EBS decoys. Oracle has not yet classified CVE-2026-101767 as exploited in the wild.