CISA Adds Actively Exploited Oracle E-Business Suite Flaw to KEV

CISA has added CVE-2026-46817 to its Known Exploited Vulnerabilities catalog, confirming that the flaw is being actively targeted. The vulnerability exists within Oracle E-Business Suite and stems from improper privilege management, categorized under CWE-269, CWE-287, and CWE-306. It allows unauthenticated attackers with network access via HTTP to compromise the Oracle Payments component.

Successful exploitation of this vulnerability can lead to a complete takeover of Oracle Payments. Federal agencies are required to apply vendor-provided mitigations by July 18, 2026, in accordance with CISA’s BOD 26-04. Organizations should evaluate their assets for internet exposure and strictly follow the mandated patching and forensics triage requirements to secure their environments.