Critical Oracle EBS bug added to CISA list of exploited vulnerabiliti…

CISA added a critical Oracle EBS vulnerability (CVE-2026-46817, CVSS 9.8) to its exploited vulnerabilities list, requiring federal agencies to patch within three days. The flaw in Oracle Payments allows unauthenticated remote compromise and is already being actively exploited in the wild. If you sell to US federal agencies or manage their Oracle EBS systems, you have 72 hours to patch or face non-compliance with binding law. This vulnerability is already being exploited by attackers; delay means breach risk and regulatory penalty.