Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

A critical flaw in Oracle E-Business Suite, tracked as CVE-2026-46817 (CVSS 9.8), is under active exploitation according to Defused Cyber. The vulnerability is an improper privilege management and authentication issue in Oracle Payments that an attacker can easily exploit to take over vulnerable instances. Organizations running Oracle E-Business Suite should patch immediately and check logs for signs of exploitation.