Oracle EBS vulnerability CVE-2026-101767 probed days after Oracle's October 2026 Critical Patch Update

Oracle EBS Vulnerability Probed Days After Patch: What to Check

28.10.2026 siteguarding2

Attackers began probing CVE-2026-101767, a critical Oracle EBS vulnerability rated CVSS 9.8, on the morning of October 27, about a week after Oracle shipped the fix. If your company runs E-Business Suite for payroll, HR or finance, the server hosting your public website may be closer to that data than anyone has checked.

PHP2Shell vulnerabilities cover: CISA KEV listing for CVE-2026-109618 with an Apache mod_php check in a terminal

PHP2Shell Vulnerabilities Exploited: Patch PHP Before Oct 29

28.10.2026 siteguarding2

CISA added the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities catalog on October 26, after honeypots caught attackers running code on an unpatched PHP server. The flaws are in the PHP runtime itself, so updating WordPress or Joomla does not close them.

Patch Management