HIGH CISA-KEV ACTIVELY EXPLOITED

CVE-2026-21962

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.

Affected Products

Oracle: HTTP Server and Oracle Weblogic Server Proxy Plug-in

References

Published: 2026-08-24 · Source: CISA-KEV · Feed updated: 2026-08-24

This high severity vulnerability was published on 2026-08-24 via CISA-KEV. ⚠ This vulnerability is in the CISA Known Exploited Vulnerabilities (KEV) catalog — it is being actively exploited in the wild. EPSS score: 43.2% (top 1% of all CVEs by exploitation probability). Affected: Oracle: HTTP Server and Oracle Weblogic Server Proxy Plug-in.

Risk Timeline

CVE Disclosed2026-08-24 · 0 days ago

CISA KEV — Actively ExploitedU.S. federal agencies required to patch · confirmed threat-actor activity

Remediation Resources

CISA / KEV

www.cisa.gov/known-exploited-vulnerabilities-catalog

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2026-21962

vulnfeed aggregates 11313 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.