Threat actors have been exploiting CVE-2026-21962, a critical Oracle HTTP Server and WebLogic vulnerability patched in January.

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

Angreifer missbrauchen eine Sicherheitslücke in Oracle HTTP-Server und Weblogic Server, die komplette Kompromittierung ermöglicht.