CVE Tools
Track your stack

CISA Warns of Exploited Oracle WebLogic Vulnerability

SecurityWeekBy Eduard Kovacs

Reported exploitedOracle HTTP ServerSnowLightWebLogic Server Proxy plugin

Our summary

CISA has added CVE-2026-21962 to its Known Exploited Vulnerabilities catalog, warning that this critical remote code execution flaw is being actively used against Oracle WebLogic environments. The vulnerability, rated with a perfect CVSS score of 10, affects both the Oracle HTTP Server and the WebLogic Server Proxy plugin, allowing attackers to compromise systems without authentication. Federal agencies were directed to apply the fix from Oracle's January 2026 security update by August 27, following reports that the bug has been targeted by China-linked threat actors since early in the year.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker NewsActively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical DataCVE-2026-21962
  2. The Hacker NewsOracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active ExploitationCVE-2026-21962

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store