critical2 sourcesCVE-2017-10271 CVE-2020-14882 +2
CISA Orders Urgent Patching for Actively Exploited Oracle WebLogic Flaw
CISA has added a critical remote code execution vulnerability in Oracle HTTP Server and the WebLogic Server Proxy plugin, tracked as CVE-2026-21962, to its Known Exploited Vulnerabilities catalog. The max-severity flaw allows unauthenticated network access and has been actively exploited in the wild since January. Federal civilian agencies have been given a tight deadline to apply the patches released by Oracle earlier this year.
Read more about CISA Orders Urgent Patching for Actively Exploited Oracle WebLogic Flaw