Back Feeds.4Sysops

CISA gives admins three days to patch actively exploited Oracle flaw

Feeds.4Sysops •IT News • August 25, 2026

CISA has given U.S. federal agencies only three days to patch CVE-2026-21962, a maximum-severity Oracle vulnerability that attackers were already probing months before it entered the agency’s Known Exploited Vulnerabilities catalog. The flaw affects Oracle HTTP Server and the WebLogic Server Proxy Plug-in on Windows virtual machines and carries a CVSS score of 10.0. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Oracle WebLogic Flaw Under Active Exploitation The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-21962, a critical vulnerability affecting Oracle HTTP Server and WebLogic Server Proxy Plug-in, to its Known Exploited Vulnerabilities catalog. This flaw, with a CVSS score of 10.0, allows unauthenticated attackers to gain unauthorized access to critical data. Affected versions include 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. CISA has urged organizations to patch the vulnerability within three days due to evidence of active exploitation. The vulnerability was first disclosed in January 2026, with proof-of-concept code available shortly after. Attackers can exploit this flaw via manipulated URIs, leading to complete compromise of vulnerable systems. Organizations are advised to treat any exposed Oracle systems as compromised until patched. The situation is urgent as attacks have already been observed targeting this vulnerability. 17 sources 79

Extracted Entities

CISA gives admins three days to patch actively exploited Oracle flaw

The full story

Extracted Entities

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)