Threat actors have started exploiting CVE-2026-46817, a critical-severity vulnerability in Oracle E-Business Suite’s Payments product.

Attackers have begun exploiting a critical vulnerability (CVE-2026-46817) in the Oracle E-Business Suite (EBS) financial application, according to threat intelligence company…

Oracle E-Business Suite vulnerability CVE-2026-46817 (CVSS 9.8) is being actively exploited in the wild despite Oracle’s recent patch release.