CISA Warns of Oracle E-Business Suite Vulnerability Actively Exploited in Attacks

CISA confirmed active exploitation of CVE-2026-46817, a critical improper-privilege-management and authentication flaw in Oracle E-Business Suite (Oracle Payments), added it to the Known Exploited Vulnerabilities catalog, and directed rapid remediation and forensic triage; organizations are urged to identify affected Oracle Payments instances, apply vendor fixes or mitigations, and treat exposed services as high-priority incidents.