The Hacker News

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated ...
Tech Times on MSN

Oracle proxy flaw CVE-2026-21962 fueled China-linked attacks on 100+ governments

CVE-2026-21962, a CVSS 10.0 Oracle WebLogic proxy flaw exploited by China-linked hackers across government and commercial ...
SecurityWeek

CISA Warns of Exploited Oracle WebLogic Vulnerability

Threat actors have been exploiting CVE-2026-21962, a critical Oracle HTTP Server and WebLogic vulnerability patched in ...
Cyber Daily

Hacked: US cyber agency warns of active exploitation of perfect-10 Oracle WebLogic bug

CISA added CVE-2026-21962 to its Known Exploited Vulnerabilities Catalog more than six months after its initial disclosure.

Attacks on Oracle Weblogic and HTTP Server observed

The US Cybersecurity and Infrastructure Security Agency (CISA) warns of attacks targeting a vulnerability in Oracle HTTP ...