AI Summary

CISA has added CVE‑2026‑35273, an Oracle PeopleSoft Enterprise PeopleTools vulnerability that allows missing authentication for a critical function, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation. The flaw is a common attack vector that can give attackers full control of affected systems. Under Binding Operational Directive 26‑04, federal civilian executive branch agencies must prioritize rapid remediation of high‑risk vulnerabilities listed in the KEV catalog, especially those that expose publicly exposed assets. The directive also requires agencies to verify whether threat actors compromised a system before a patch is applied.

AI summaries can be wrong sometimes—always verify important details using the source article.