erroneo.us
Search all guides⌘K

Digest · Thursday

Security digest: May 28, 2026

1 editorial brief and 5 critical advisories.

All digests · RSS · Markdown

Take stock

  • Act now: Oracle EBS Payments CVE-2026-46817: Exploited Takeover. Every organization running Oracle E-Business Suite 12.2.3 through 12.2.15, most urgently where any EBS web tier is reachable from the internet or from partner networks.
  • Go: 5 critical advisories (github.com/casdoor/casdoor). Check with govulncheck ./....
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Act now

· Vulnerability · CVE-2026-46817

Oracle EBS Payments CVE-2026-46817: Exploited Takeover

If you run Oracle E-Business Suite 12.2 without the May 2026 Critical Security Patch Update, patch now; this is an unauthenticated, low-complexity takeover of the payments module and it has been exploited since late June.

Must act: Every organization running Oracle E-Business Suite 12.2.3 through 12.2.15, most urgently where any EBS web tier is reachable from the internet or from partner networks.

Can relax: Organizations that do not run Oracle E-Business Suite, and EBS 12.2 customers who already applied the May 2026 CSPU patches for Oracle Payments.

  1. List every EBS 12.2 environment, including test and clones that share production data, and confirm whether the May 2026 CSPU EBS patches are applied.
  2. Apply the EBS patches from the May 2026 CSPU (My Oracle Support Note KA923), plus the Database and Fusion Middleware patches Oracle recommends for the EBS tech stack.
  3. Until patched, take the EBS web tier off the internet or put it behind a VPN, and deny external requests to /OA_HTML/ibytransmit.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 5

GitHub-reviewed advisories rated critical, published this day (Pacific time).

Go 5

Check: govulncheck ./...