Attackers are actively exploiting a critical vulnerability in Oracle E-Business Suite, identified as CVE-2026-46817, which enables remote, unauthenticated attackers to gain control of Oracle Payments1. This flaw, with a CVSS score of 9.8, allows for the takeover of Oracle E-Business via HTTP, making it a high-priority target for malicious actors. Cybersecurity firm Defused Cyber has observed the exploitation of this vulnerability on their honeypots, indicating that attackers are already leveraging it in the wild. The exploitation of CVE-2026-46817 expands the active attack surface, making it essential for organizations to assess their exposure and prioritize mitigation based on evidence of exploitation. This vulnerability poses a significant risk to organizations using Oracle E-Business Suite, and prompt action is necessary to prevent potential breaches, so practitioners should prioritize patching and monitoring their systems to prevent exploitation.