CVE-2026-46923 is a vulnerability in the Authorization component of Oracle Public Sector Financials (International) within Oracle E-Business Suite. It affects supported versions from 12.2.3 up to 12.2.15. The vulnerability requires a high privileged attacker with network access via HTTP and is difficult to exploit. Successful exploitation can result in complete takeover of the Oracle Public Sector Financials (International) product. The vulnerability has a CVSS 3.1 score of 8.0 with high impact on confidentiality, integrity, and availability, and the scope is changed to potentially impact additional Oracle products. The vendor advisory from Oracle (July 2026 Critical Patch Update) does not explicitly confirm a patch or remediation level for this specific vulnerability, but it strongly recommends applying available patches without delay. No known exploits in the wild have been reported.

The vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials (International), potentially leading to full product takeover. The impact affects confidentiality, integrity, and availability of the affected product. Additionally, due to scope change, other Oracle products may be significantly impacted by attacks exploiting this vulnerability. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Oracle's July 2026 Critical Patch Update advisory does not explicitly state a patch or fix for CVE-2026-46923. Oracle strongly recommends customers remain on actively-supported versions and apply security patches promptly when available. Monitor Oracle's official security alerts page for updates regarding patch availability for this vulnerability.