CVE-2026-21962
Known exploited · CISA KEV
CVSS 10 CRITICAL: vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware… EPSS 42% (99th percentile).
CISA federal remediation date Aug 27
Vulnerabilities · 173 days ago
CloudSEK honeypot logs show exploitation of CVE-2026-21962 against Oracle WebLogic began on Jan 22, the same day exploit code was published.
Known exploited · CISA KEV
CVSS 10 CRITICAL: vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware… EPSS 42% (99th percentile).
CISA federal remediation date Aug 27
1 source covering this story
Rapid Exploitation of CVE-2026-21962 Hits Oracle WebLogic
Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study
Part of the PlainSec briefing for 2026-03-27