Skip to content
Critical Oracle WebLogic Flaw Under Active Exploitation

Critical Oracle WebLogic Flaw Under Active Exploitation

First seen 25 Aug 2026, 07:20 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 26, 2026 at 06:54 UTC
  • •CVE-2026-21962 has a CVSS score of 10.0 and allows unauthenticated access.
  • •CISA requires federal agencies to patch this vulnerability within three days.
  • •Active exploitation of this flaw has been confirmed, with attacks already underway.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-21962, a critical vulnerability affecting Oracle HTTP Server and WebLogic Server Proxy Plug-in, to its Known Exploited Vulnerabilities catalog. This flaw, with a CVSS score of 10.0, allows unauthenticated attackers to gain unauthorized access to critical data. Affected versions include 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. CISA has urged organizations to patch the vulnerability within three days due to evidence of active exploitation. The vulnerability was first disclosed in January 2026, with proof-of-concept code available shortly after. Attackers can exploit this flaw via manipulated URIs, leading to complete compromise of vulnerable systems. Organizations are advised to treat any exposed Oracle systems as compromised until patched. The situation is urgent as attacks have already been observed targeting this vulnerability.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 18d ago How this analysis works

Timeline

2026-01-20
CVE-2026-21962 published
Oracle disclosed a critical vulnerability affecting its HTTP Server and WebLogic Server Proxy Plug-in.
nvd.nist.gov
2026-01-22
First public PoC released
Proof-of-concept code for CVE-2026-21962 was made publicly available, enabling easier exploitation.
nvd.nist.gov
2026-08-24
CVE added to CISA KEV catalog
CISA confirmed active exploitation of CVE-2026-21962, prompting urgent advisories for organizations.
Ground.News
2026-08-25
CISA issues urgent patch advisory
CISA has given U.S. federal agencies three days to patch the critical Oracle vulnerability.
4Sysops

More articles in this cluster (17)

Following this threat?

Track Oracle and CVE-2026-21962 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (21)

1 / 4