sign in--:--:--UTC

CVE-2026-46817

exploited in the wild☆ pin

CVSS

9.8

Reports

9

First seen

Jun 8, 2026

Last seen

Jul 16, 2026

Affected product

Oracle E-Business Suite

Associated actors

ShinyHunters ×2 Clop ×2 Cloud Atlas APT ×1 Gentlemen ×1 North Korea-aligned (PolinRider campaign) ×1 ShinyHunter ×1 TeamPCP ×1 UAT-11795 ×1 BlackField ×1 Vect ransomware group ×1 ChocoPoC campaign operators ×1

Recent reports

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

The Hacker NewsJul 16, 2026 Critical

CISA orders federal agencies to patch actively exploited Oracle E-Business Suite flaw by Saturday

Bleeping ComputerJul 16, 2026 High

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesJul 15, 2026 High

Weekly Threat Intelligence Report – July 6: Ransomware Attacks, AI Threats, and Critical Vulnerabilities

Check Point ResearchJul 6, 2026 High

Researchers spot exploitation of critical Oracle E-Business Suite vulnerability CVE-2026-46817

CyberScoopJul 1, 2026 Critical

Over 900 Oracle E-Business Suite instances exposed to ongoing CVE-2026-46817 attacks

Bleeping ComputerJul 1, 2026 Critical

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

The Hacker NewsJun 30, 2026 Critical

Hackers now exploit critical Oracle E-Business flaw in attacks

Bleeping ComputerJun 29, 2026 High

Oracle Releases May 2025 Security Update: 35 Vulnerabilities Including 16 High-Risk Issues

NICS TaiwanJun 8, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans