CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated HTTP access.

CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated HTTP access.

Threat actors have been exploiting CVE-2026-21962, a critical Oracle HTTP Server and WebLogic vulnerability patched in January.