CVE-2026-21992 - Vulnerability Details

Related Threat Clusters

• CISA Warns of Active Exploitation of Oracle WebLogic Vulnerability CVE-2024-21182

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a two-year-old vulnerability in Oracle WebLogic Server, tracked as CVE-2024-21182. This flaw,…

  17 articles · Updated June 2, 2026
• Oracle April 2026 Critical Patch Update Addresses 481 Vulnerabilities

  On April 21, 2026, Oracle released its Critical Patch Update (CPU) for April 2026, which includes 481 security patches addressing 241 unique CVEs across 28 product families. Among these, 34 patches are classified as…

  12 articles · Updated April 21, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1046 articles · Updated February 9, 2026

Recent Intelligence Reports

• Cpuapr2026 — www.oracle.com · June 3, 2026
• CISA flags two-year-old Oracle flaw as actively exploited in attacks — Bleepingcomputer · June 2, 2026
• CISA flags two-year — Bleepingcomputer · June 2, 2026
• Oracle vulnerability (CVE-2026-21992) impacts core products — Sophos · March 24, 2026
• CC-4760 - Oracle Releases Out-of — Digital.Nhs.Uk · March 23, 2026
• Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992) — Feeds2.Feedburner · March 23, 2026
• Critical Vulnerability in Oracle Products - Cyber Security Agency of Singapore (CSA) — Csa.Sg · March 23, 2026
• Oracle Fixes High — Gbhackers · March 21, 2026

Related Entities