Scmagazine Critical Oracle Identity Manager RCE Vulnerability Exploited
Article Content
Browse articles 
A critical remote code execution vulnerability, tracked as CVE-2025-61757, has been identified in Oracle Identity Manager. This flaw allows unauthenticated attackers to execute code remotely and has been actively exploited in the wild, potentially as a zero-day. The vulnerability was disclosed and patched by Oracle on October 21, 2025, and has a CVSS score of 9.8.
Ask AI about this cluster
Answers cite the sources they use
Updated 229d ago How this analysis works
More articles in this cluster (4)
Following this threat?
Track Oracle and CVE-2025-4581 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency Patches Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed on October 21, 2026, allowing unauthenticated remote code execution (RCE). The vulnerabilities, collectively known as PHP2Shell, affect all PHP installations serving web requests, including popular platforms like… 
Log4Shell Vulnerability: Ongoing Risks and Mitigations CVE-2021-44228, known as Log4Shell, is a critical remote code execution vulnerability in Apache Log4j 2, disclosed on December 10, 2021. This flaw allows attackers to execute arbitrary code by manipulating log messages, affecting a wide range of applications and services that utilize Log4j. Despite being disclosed…