CISA orders feds to patch actively exploited Oracle flaw by Saturday

A critical vulnerability (CVE-2026-46817) in the Oracle E-Business Suite financial application allows unauthenticated attackers with HTTP network access to take over Oracle Payments. The U.S…