CVE-2026-21992 2

Vulnerability (CVE)

Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

Oracle released security updates for a critical flaw in Identity Manager and Web Services Manager tracked as CVE-2026-21992 with a CVSS score of 9.8 out of 10.0, which Oracle says is remotely exploitable without authentication and may result in remote code...

Vulnerabilities & Patching

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

Cyber Risks The Hacker News

Attackers backdoored Trivy, the open-source vulnerability scanner from Aqua Security with over 32,000 GitHub stars and more than 100 million Docker Hub downloads, injecting credential-stealing malware into official releases and GitHub Actions used by...

Malware