CVE-2026-21962 - Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.
- Severity
- critical
- Product
- Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in
- Published
- 2026-08-24
- EPSS
- 0.709
- CISA KEV
- Known exploited
- Ransomware
- Known campaign use
References and validation
- https://github.com/search?q=CVE-2026-21962&type=repositories
- https://nvd.nist.gov/vuln/detail/CVE-2026-21962
Entries are refreshed from CISA KEV and FIRST EPSS. Validate applicability before testing.