CISA flags Oracle E‑Business Suite flaw CVE‑2026‑46817 in KEV

THE Known Exploited Vulnerabilities (KEV) Catalog, maintained by CISA, serves as a vital resource for cybersecurity professionals to identify and manage vulnerabilities that have been actively exploited. The catalog aids organizations in prioritizing their vulnerability management efforts. One highlighted vulnerability is CVE-2026-46817, which affects Oracle E-Business Suite's privilege management, allowing potential unauthorized access to Oracle Payments. Mitigation actions include adhering to vendor instructions and following CISA’s directives. The catalog is also available in CSV and JSON formats.