CVE-2026-21962

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 21, 2026

Last Seen

September 28, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical WebLogic RCE Vulnerability Exploited in the Wild86.2

Hackers are actively exploiting a critical Remote Code Execution (RCE) vulnerability in Oracle WebLogic Server, tracked as CVE-2026-21962, which has a maximum CVSS score of 10.0. This unauthenticated flaw allows attackers to execute arbitrary code on affected systems. The vulnerability was published...

Critical Oracle WebLogic Flaw Under Active Exploitation78.8

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-21962, a critical vulnerability affecting Oracle HTTP Server and WebLogic Server Proxy Plug-in, to its Known Exploited Vulnerabilities catalog. This flaw, with a CVSS score of 10.0, allows unauthenticated attackers t...

CISA Warns of Active Exploitation of Oracle WebLogic Vulnerability CVE-2024-2118272.9

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a two-year-old vulnerability in Oracle WebLogic Server, tracked as CVE-2024-21182. This flaw, which affects versions 12.2.1.4.0 and 14.1.1.0.0, allows unauthenticated attackers...

ShinyHunters Hack Exposes Sensitive FBI Employee Data72.8

On September 23, 2026, the FBI disclosed an investigation into a data breach by the hacking group ShinyHunters, which claims to have stolen sensitive personal information of approximately 38,000 FBI employees and job applicants. The stolen data reportedly includes names, addresses, phone numbers, So...