Oracle HTTP Server

Critical Oracle WebLogic Flaw Under Active Exploitation

Critical Vulnerabilities in Oracle Coherence and Access Manager Disclosed

Oracle Releases January 2026 Critical Patch Update Addressing 337 Vulnerabilities

Critical Vulnerability in Oracle HTTP Server and WebLogic Server

Multiple Vulnerabilities Exploited in Cybersecurity Threats

CISA adds Oracle WebLogic bug to its list of exploited vulnerabilities | news

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

Attacks on Oracle Weblogic and HTTP Server observed

Oracle July 2026 CPU: pre-auth 10.0 RCE in WebLogic + more Suriq / 1d Strip it down to the software people actually self-host, and a much smaller set demands attention this week, a cluster of flaws an unauthenticated attacker can trigger over the network for full remote code execution, several scored a perfect CVSS 10.0. Any WebLogic Server, Oracle HTTP Server or Coherence instance reachable from the internet or an untrusted network, patched first, since these carry the unauthenticated 10.0 and