CISA's list that day

15 July 2026

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in KNX Association KNX Protocol Connection Authorization Option 1 and Oracle E-Business Suite. The US federal deadlines run from to .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2026-46817Improper Privilege ManagementOracle E-Business SuitePatch nowForensic triage required by CISA0.01
CVE-2023-4346Overly Restrictive Account Lockout MechanismKNX Association KNX Protocol Connection Authorization Option 1Patch soon0.01

Other changes that day

  1. CVE-2026-56155 Microsoft Active Directory Federation ServicesEdited: notes.