U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog
ID: c5845dca-e6a0-5442-9f03-8dd806561336
STIX ID: report--c5845dca-e6a0-5442-9f03-8dd806561336
Feed Name: Security Affairs
Threat Score
CISA added two items to its Known Exploited Vulnerabilities catalog: CVE-2023-4346, an account-lockout/connection authorization weakness in KNX building automation that can render devices unavailable, and CVE-2026-46817, an Oracle E-Business Suite flaw allowing unauthenticated takeover over HTTP that is reported as actively exploited; CISA has issued remediation deadlines for federal agencies and recommends organizations apply patches immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.