Oracle Releases Emergency Patch for CVE-2025-61882 Amid Cl0p Data Theft Attacks

1 min read
Source: The Hacker News
Oracle Releases Emergency Patch for CVE-2025-61882 Amid Cl0p Data Theft Attacks
Photo: The Hacker News
TL;DR

Oracle released an emergency patch for a critical vulnerability (CVE-2025-61882) in its E-Business Suite, which has been exploited by the Cl0p ransomware group in recent data theft attacks. The flaw allows remote code execution without authentication, and indicators suggest involvement of the LAPSUS$ group. Organizations are advised to check for compromises, as exploitation has already occurred.

Share this article

Want the full story? Read the original reporting

Read on The Hacker News