Attackers Rapidly Weaponize Critical Oracle WebLogic RCE, Honeypot Study Finds

CloudSEK's honeypot analysis observed immediate and widespread exploitation of Oracle WebLogic CVE-2026-21962 (CVSS 10.0), with attackers beginning to exploit the flaw the same day exploit code was published; activity included large-scale automated scanning, use of common scanning tools, and additional attempts against older WebLogic RCE vulnerabilities, leading researchers to urge immediate patching, restricted console access, WAF deployment, and enhanced log monitoring.