CVE-2026-21962

exploited in the wild☆ pin

CVSS

10.0

Reports

First seen

Apr 14, 2026

Last seen

Jun 2, 2026

Affected product

Oracle HTTP Server (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0); Oracle WebLogic Server Proxy Plug-in Apache (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0); Oracle WebLogic Server Proxy Plug-in IIS (12.2.1.4.0)

Recent reports

High

Oracle WebLogic CVE-2024-21182 Added to CISA KEV Catalog After Active Exploitation

The Hacker NewsJun 2, 2026 High

Oracle Fusion Middleware High-Risk Vulnerability (CVE-2026-21962) Patch Guidance

NICS TaiwanApr 14, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.