CVE-2025-61882Vulnerability
Oracle E-Business Suite Unspecified Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Infosecurity Magazine · last reported
Last reported 1 month ago
CISA KEVAdded 6 Oct 2025
Fix due 27 Oct 2025
Used by ransomware: knownCISA KEV catalogue
Fix due 27 Oct 2025
Used by ransomware: knownCISA KEV catalogue
EPSS99.7%
higher than 99% of CVEsFIRST EPSS, as of 20 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 20 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
ShinyHunters Claim Hack of Rival Ransomware Gang Clop“This included the zero-day CVE-2025-61882 which was used by both groups to steal data from organizations in blackmail and extortion campaigns.”
Thanks — we review every report.