Vulnerability

PoC Released for Critical Oracle E-Business Suite Flaw Exploited by Ransomware

Do Son January 26, 2026 3 minutes read

Oracle E-Business Suite RCE CVE-2025-61882 PoC

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Leave a Reply Cancel reply

You must be logged in to post a comment.

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-85102CVSS 9.8
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93616CVSS 9.8
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93952CVSS 10.0
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-32996CVSS 7.3
A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
Admin intel📅 Updated: Sep 22, 2026
CVE-2026-7273CVSS 8.8
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a...
CISA KEV📅 Added to KEV: Sep 21, 2026

CVE-2026-96755CVSS 9.8
orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts OpenAPI schema...
📅 Updated: Sep 23, 2026
CVE-2026-85724CVSS 9.6
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when pattern-based ACL rules are configured, AuthorizationsCollector.canDoOperation substitutes...
📅 Updated: Sep 23, 2026
CVE-2026-96759CVSS 9.8
orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options...
📅 Updated: Sep 23, 2026
CVE-2026-96758CVSS 9.8
orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart...
📅 Updated: Sep 23, 2026
CVE-2026-96757CVSS 9.8
orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in...
📅 Updated: Sep 23, 2026
CVE-2026-96754CVSS 9.8
orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape OpenAPI...
📅 Updated: Sep 23, 2026
CVE-2026-96276CVSS 9.8
If a malicious SDK container declares an extension point with a crafted `directory` path, and a developer runs...
📅 Updated: Sep 23, 2026
CVE-2026-86246CVSS 9.1
Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including...
📅 Updated: Sep 23, 2026

Critical Alert 4 Active Exploits Detected Today

🔐 Access to This Vulnerability Report Requires Support

Get Zero-Hour Vulnerability Alerts

Do Son

Leave a Reply Cancel reply