Ethical Hacking News
Oracle has marked the end of Cybersecurity Awareness Month with a quadruple trouble, highlighting the company's vulnerabilities to attackers. The company's E-Business Suite and PeopleSoft applications are under attack, and attackers are exploiting critical vulnerabilities to gain unauthorized access to sensitive data and execute commands. It is essential for organizations to prioritize cybersecurity and invest in robust security measures to protect themselves against these types of attacks.
Oracle E-Business Suite (EBS) has a critical, unauthenticated SQL injection bug (CVE-2026-101767) that can lead to remote code execution (RCE). A new analysis reveals three distinct vulnerabilities in Oracle PeopleSoft that can be combined to achieve RCE. Attackers are exploiting these vulnerabilities to gain unauthorized access to sensitive data and execute commands. The affected data may include financial, payroll, HR, and procurement records. Attackers have deployed web shells on dozens of systems globally, compromising higher education, technology, IT services, healthcare, agriculture, transportation, and government. Prioritizing cybersecurity and investing in robust security measures is essential to protect against these types of attacks. Staying informed and up-to-date with the latest security patches and updates is crucial to reduce the risk of being exploited by attackers.
Oracle, the multinational technology corporation, has marked the end of Cybersecurity Awareness Month with a quadruple trouble, highlighting the company's vulnerabilities to attackers. According to recent reports, attackers are probing a critical Oracle E-Business Suite vulnerability that can lead to remote code execution (RCE), despite Oracle issuing a patch earlier this month. This vulnerability, identified as CVE-2026-101767, is a critical, unauthenticated SQL injection bug in Oracle EBS that can lead to RCE.
The Oracle EBS vulnerability is not the only concern, as a new analysis indicates that an Oracle PeopleSoft zero-day exploited by ShinyHunters as early as May involves three distinct vulnerabilities that can be combined to achieve RCE. These vulnerabilities, identified as CVE-2026-35273, are related to Server-Side Request Forgery (SSRF) in the PeopleSoft Integration Gateway (PSIGW), an external control of file path vulnerability in PSEMHUB’s ExecuteProcessActivityCommand handler, and a deserialization of untrusted data flaw. These three vulnerabilities can be combined to compromise affected instances of PeopleSoft.
Attackers are exploiting these vulnerabilities to gain unauthorized access to sensitive data and execute commands. The affected data may include financial, payroll, HR, and procurement records. In addition, attackers are deploying web shells on dozens of systems globally, spanning higher education, technology, IT services, healthcare, agriculture, transportation, and government.
Oracle has patched the EBS vulnerability, but it is unclear whether this patch is effective in preventing successful exploitation. ShinyHunters has exploited the PeopleSoft zero-day, but it is unclear whether the attackers have been successful in achieving RCE. Oracle has not documented any successful exploitation of the CVE-2026-101767 vulnerability.
The recent vulnerabilities highlight the importance of patching and updating software regularly. Attackers are exploiting these vulnerabilities to gain unauthorized access to sensitive data and execute commands. It is essential for organizations to prioritize cybersecurity and invest in robust security measures to protect themselves against these types of attacks.
In addition to the vulnerabilities, there have been other security concerns reported in the recent days. For example, a critical Oracle EBS vulnerability was exploited by attackers, despite Oracle issuing a patch earlier this month. A big Red gets cozy with Google to offer TPUs to AI customers. Max-severity GitLab bug allows remote code execution over 12 years of releases. Cisco make-me-root email bug exploited as a 0-day by unknown crims.
The recent vulnerabilities highlight the importance of staying informed and up-to-date with the latest security patches and updates. Organizations must prioritize cybersecurity and invest in robust security measures to protect themselves against these types of attacks. By staying informed and taking proactive measures, organizations can reduce the risk of being exploited by attackers.
Related Information:
https://www.ethicalhackingnews.com/articles/Oracle-Celebrates-Cybersecurity-Awareness-Month-with-a-Quadruple-Whammy-of-Vulnerabilities-ehn.shtml
https://www.theregister.com/security/2026/10/28/oracle-celebrates-end-of-cybersecurity-awareness-month-with-quadruple-trouble/5306121
https://nvd.nist.gov/vuln/detail/CVE-2026-101767
https://www.cvedetails.com/cve/CVE-2026-101767/
https://nvd.nist.gov/vuln/detail/CVE-2026-35273
https://www.cvedetails.com/cve/CVE-2026-35273/
Published: Wed Oct 28 16:01:16 2026 by llama3.2 3B Q4_K_M
