[CVE-2026-46817]

July 18, 2026

• Oracle E-Business Suite CVE-2026-46817 under active exploitation — CISA confirmed exploitation of the unauthenticated flaw in the Oracle Payments File Transmission component, with 1,000+ internet-exposed EBS instances tracked and a July 18 federal deadline (Daily Dark Web). · Vulnerabilities & Exploits

in A Pre-Auth RCE Lands in WordPress Core, Proof-of-Concept and All

July 3, 2026

• Oracle E-Business Suite CVE-2026-46817 was exploited against ~950 exposed instances before public exploit code dropped, allowing attackers to read sensitive files. The Register, CERT.dk. · Vulnerabilities & Exploits

in Ransomware on Autopilot, and a Pile of Critical Bugs Under Fire

June 30, 2026

• Oracle E-Business Suite CVE-2026-46817 (CVSS 9.8), an improper-privilege/auth flaw in Oracle Payments, is now being exploited in the wild per Defused, allowing instance takeover. The Hacker News, BleepingComputer · Vulnerabilities & Exploits

in Edge Appliances Bleed: watchTowr Drops Kemp LoadMaster Pre-Auth RCE as Oracle EBS Joins the Exploited List