Skip to content
Critical Vulnerability in Oracle HTTP Server and WebLogic Server

Critical Vulnerability in Oracle HTTP Server and WebLogic Server

First seen 22 Jan 2026, 21:42 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A critical vulnerability (CVE-2026-21962) has been identified in Oracle HTTP Server and WebLogic Server Proxy Plug-in, allowing unauthenticated attackers to create, delete, or modify critical data. Oracle has released security updates to address this vulnerability, which has a CVSS v3.1 score of 10. Users and administrators are urged to update their systems immediately.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 217d ago How this analysis works

Timeline

Date unknown
Vulnerability discovered
Recent
Exploit released
Date unknown
Patch released

More articles in this cluster (2)

Following this threat?

Track Oracle and CVE-2026-21962 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed