Security · 29 October 2026
Oracle EBS Critical SQL Injection and PeopleSoft 0‑Day Reveal Triple Vulnerabilities
Attackers are probing a critical unauthenticated SQL injection (CVE‑2026‑101767) in Oracle E‑Business Suite that can lead to remote code execution, despite a patch released earlier this month. Separately, a PeopleSoft zero‑day used by ShinyHunters combines three distinct vulnerabilities to achieve RCE, with exploitation observed as early as May.
Why it matters
Product managers overseeing ERP solutions must prioritize rapid deployment of the October Oracle EBS patch to mitigate remote code execution risk.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 29 Oct →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.