
In a summer when routine patch cycles felt safe enough, a quiet wave of break-ins through Oracle E‑Business Suite proved that a single pre-auth web request could become a master key to finance, HR, and supply chain data before most security teams even knew there was a door to lock. The incident—anchored to CVE‑2025‑61882 and linked by numerous teams to










