Tag: CVE-2026-21962

Critical CVEs

CISA Flags Actively Exploited Oracle WebLogic Flaw CVE-2026-21962

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a maximum-severity vulnerability affecting Oracle HTTP Server and Oracle WebLogic Server to…

active exploitation BOD 26-04 CISA CISA KEV

August 25, 2026

Critical CVEs

CVE-2026-21962 — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance…

CISA KEV CVE-2026-21962 HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle

August 24, 2026