CVE-2026-21962

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 21, 2026

Last Seen

August 26, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical WebLogic RCE Vulnerability Exploited in the Wild86.2

Hackers are actively exploiting a critical Remote Code Execution (RCE) vulnerability in Oracle WebLogic Server, tracked as CVE-2026-21962, which has a maximum CVSS score of 10.0. This unauthenticated flaw allows attackers to execute arbitrary code on affected systems. The vulnerability was published...

Critical Oracle WebLogic Flaw Under Active Exploitation78.8

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-21962, a critical vulnerability affecting Oracle HTTP Server and WebLogic Server Proxy Plug-in, to its Known Exploited Vulnerabilities catalog. This flaw, with a CVSS score of 10.0, allows unauthenticated attackers t...

CISA Warns of Active Exploitation of Oracle WebLogic Vulnerability CVE-2024-2118272.9

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a two-year-old vulnerability in Oracle WebLogic Server, tracked as CVE-2024-21182. This flaw, which affects versions 12.2.1.4.0 and 14.1.1.0.0, allows unauthenticated attackers...

Oracle Releases January 2026 Critical Patch Update Addressing 337 Vulnerabilities50.8

On January 20, 2026, Oracle released its Critical Patch Update (CPU) for January 2026, addressing 337 security vulnerabilities across 122 products. This update includes fixes for 158 unique CVEs, with 27 patches classified as critical, impacting various Oracle product families such as databases and...