sign in--:--:--UTC

CVE-2026-21962

exploited in the wild☆ pin

CVSS

10.0

Reports

5

First seen

Apr 14, 2026

Last seen

Aug 25, 2026

Affected product

Oracle HTTP Server, Oracle WebLogic Server Proxy Plug-in

Recent reports

Actively Exploited Oracle WebLogic Flaw Allows Unauthenticated Data Access

The Hacker NewsAug 25, 2026 High

Oracle Security Advisory – January 2026 Quarterly Rollup (AV26-042)

Canadian Centre AlertsAug 24, 2026 High

CISA Adds Oracle HTTP Server and WebLogic Proxy Plug-in Vulnerability to KEV Catalog

CISA AdvisoriesAug 24, 2026 High

Oracle WebLogic CVE-2024-21182 Added to CISA KEV Catalog After Active Exploitation

The Hacker NewsJun 2, 2026 High

Oracle Fusion Middleware High-Risk Vulnerability (CVE-2026-21962) Patch Guidance

NICS TaiwanApr 14, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans