Hackers now scanning systems for recently-patched Oracle flaw

Threat actors began scanning for systems vulnerable to CVE-2026-101767 almost immediately after Oracle released its Critical Patch Update, demonstrating how quickly attackers operationalize newly disclosed vulnerabilities. The flaw in Oracle's Application Object Library allows unauthenticated attackers to take full control of affected systems, making it exceptionally dangerous for any internet-facing EBS deployments. Organizations that delayed applying the October patch have left a critical business application exposed to trivial, automated exploitation. This incident underscores that the window between patch release and active exploitation is now measured in days or hours, not weeks — making timely patching a non-negotiable security control.