# Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

- URL: https://talkfuse.com/story/oracle-celebrates-end-of-cybersecurity-awareness-month-with-quadruple-trouble/
- Published: 2026-10-28T19:56:56+00:00
- Updated: 2026-10-28T21:05:08+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/10/28/oracle-celebrates-end-of-cybersecurity-awareness-month-with-quadruple-trouble/5306121
- Topics: Cybersecurity, Technology

## Key points

- Attackers are probing a patched Oracle EBS flaw.
- Researchers say the PeopleSoft zero-day combines three vulnerabilities.
- Existing web shells may remain after patching.

## Summary

Attackers are probing a critical Oracle E-Business Suite vulnerability that can allow unauthenticated remote code execution, even though Oracle issued a patch earlier this month. Separately, researchers say the PeopleSoft zero-day exploited by ShinyHunters comprises three vulnerabilities that can be combined to reach remote code execution.

The EBS flaw, CVE-2026-101767, affects the Thin Client Framework servlet and could expose application data such as financial, payroll, HR and procurement records. ShinyHunters claimed it had breached more than 100 organisations through the PeopleSoft issue, and Mandiant later reported web shells on dozens of systems across sectors including education, healthcare and government. Researchers are coordinating with Oracle to assign separate identifiers to the three PeopleSoft bugs; patching may not remove attackers already present on compromised systems.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.