Accenture, acting as a contractor for the FBI, allegedly failed to install updates for Oracle Peoplesoft after CVE-2026-35273 was published.
This was a "Missing Authentication for Critical Function" vulnerability and scored 9.8. If this didn't raise any flags, the CISA KEV listing should have. It was an n-day at release.
But no, interestingly enough the FBI is exempt from BOD 26-04 and wasn't even obliged to update?!
Man, if not even federal agencies fix their vulns, this is all pointless.
Dr. Christopher Kunz
npub1f2…2wq5p
2026-10-06 11:45:54 UTC
Author Public Key
npub1f2amg3g8eahf043rnnle5qdqpmj0t9e4j44cvvf4tlapnfckumrq42wq5pSeen on
wss://relay.ditto.pubPublished at
2026-10-06 11:45:54 UTCEvent JSON
{
"id": "4137f4c1831c41fc396bffb5c0b94ff3961103706306d11bac947f8aac645be6",
"pubkey": "4abbb44507cf6e97d6239cff9a01a00ee4f59735956b8631355ffa19a716e6c6",
"created_at": 1791287154,
"kind": 1,
"tags": [
[
"proxy",
"https://chaos.social/users/christopherkunz/statuses/117393794949743396",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Accenture, acting as a contractor for the FBI, allegedly failed to install updates for Oracle Peoplesoft after CVE-2026-35273 was published. \n\nThis was a \"Missing Authentication for Critical Function\" vulnerability and scored 9.8. If this didn't raise any flags, the CISA KEV listing should have. It was an n-day at release.\n\nBut no, interestingly enough the FBI is exempt from BOD 26-04 and wasn't even obliged to update?!\n\nMan, if not even federal agencies fix their vulns, this is all pointless.",
"sig": "72ea807eebcc99c3cbec26a385ed35c03df305070d261d2364e745ea165ef882af7a300541c329f474f60f72cef81842d9713f1cf1e4781847f7b567f33d26d3"
}