CVE-2026-21962 Oracle Flaw: CVSS 10 Exploited in Wild

**CVE-2026-21962 — Critical Oracle HTTP Server / WebLogic Server Proxy Plug-in vulnerability (CVSS 10.0) actively exploited in the wild.** Unauthenticated attackers can craft HTTP requests that bypass proxy authorization to access, create, modify, or delete critical server data; Oracle has released patches and CISA added the CVE to its Known Exploited Vulnerabilities catalog with a binding remediation directive, so administrators must apply vendor updates immediately.