AI Summary

CISA added CVE‑2026‑35273, an Oracle PeopleSoft Enterprise PeopleTools vulnerability that allows missing authentication for a critical function, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation. The flaw is a common attack vector for malicious actors and poses significant risks to federal enterprise systems. Binding Operational Directive 26‑04, which updates BOD 22‑01, requires Federal Civilian Executive Branch agencies to prioritize rapid remediation of high‑risk vulnerabilities listed in the KEV catalog on publicly exposed assets that grant total control after exploitation. The directive also sets expectations for agencies to verify whether threat actors compromised a system before a patch is applied.

AI summaries can be wrong sometimes—always verify important details using the source article.