CISA Warns Oracle HTTP Server Flaw Lets Unauthenticated Attackers Access and Modify Critical Data
ID: 9054ce10-ee9a-52cc-b2ff-96c5afd11926
STIX ID: report--9054ce10-ee9a-52cc-b2ff-96c5afd11926
Feed Name: Cyber Press
Threat Score
CISA added CVE-2026-21962—an unauthenticated improper access-control flaw in Oracle HTTP Server and the WebLogic Server Proxy Plug-in—to its Known Exploited Vulnerabilities catalog after confirming active exploitation; federal agencies must prioritize remediation under BOD 26-04. Organizations should identify affected internet-facing deployments, apply Oracle patches or mitigations, restrict proxy/admin access, and increase log and traffic monitoring for anomalous unauthenticated requests until remediation is complete.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.