Known Exploited Vulnerabilities August 24, 2026 · CISA KEV Catalog

CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-21962 Oracle
Related: CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability Known Exploited Vulnerabilities · Jul 15, 2026
CVE-2026-35273: Oracle People Soft Enterprise People Tools Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Jun 12, 2026
CVE-2024-21182: Oracle Web Logic Server Unspecified Vulnerability Known Exploited Vulnerabilities · Jun 01, 2026