CISA 2026-07-15

CISA KEV — KNX Association KNX Protocol Connection Authorization (CVE-2023-4346) +1 more

Machine-generated analysis · WAYSCloud LLM

CISA added CVE-2023-4346 (KNX protocol) and CVE-2026-46817 (Oracle E-Business Suite) to the KEV catalog. Both are identified as actively exploited.

Context

The advisory references the KNX Association’s KNX protocol connection authorization option 1 and Oracle E-Business Suite. CISA states these vulnerabilities are being actively exploited and have been added to the Known Exploited Vulnerabilities catalog. The catalog is used to prioritize rapid remediation on publicly exposed assets that grant total control post-exploitation.

Operator considerations

Check: inventory deployments of KNX protocol implementations and Oracle E-Business Suite versions for the listed CVEs.
Isolate: segment any publicly exposed systems running these products until they are remediated.
Patch: apply vendor-provided fixes for CVE-2023-4346 and CVE-2026-46817 as soon as they are available.
Log: monitor logs for authentication failures or privilege-escalation activity related to these CVEs.

From Cybersecurity and Infrastructure Security Agency ↗

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

CVE-2026-46817 Oracle E-Business Suite Improper Privilege Management Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities an...

Read the full advisory on CISA →