The Hacker News

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated ...
SecurityWeek

CISA Warns of Exploited Oracle WebLogic Vulnerability

Threat actors have been exploiting CVE-2026-21962, a critical Oracle HTTP Server and WebLogic vulnerability patched in ...
Tech Times on MSN

Oracle proxy flaw CVE-2026-21962 fueled China-linked attacks on 100+ governments

CVE-2026-21962, a CVSS 10.0 Oracle WebLogic proxy flaw exploited by China-linked hackers across government and commercial ...

Attacks on Oracle Weblogic and HTTP Server observed

The US Cybersecurity and Infrastructure Security Agency (CISA) warns of attacks targeting a vulnerability in Oracle HTTP ...
InfoWorld

Oracle issues warning over dangerous WebLogic flaw

Oracle is scrambling to create an emergency patch for a severe vulnerability in its WebLogic server that can be exploited over a network without a need for a username or a password Oracle is ...
Bleeping Computer

Oracle silently fixes zero-day exploit leaked by ShinyHunters

Oracle has silently fixed an Oracle E-Business Suite vulnerability (CVE-2025-61884) that was actively exploited to breach servers, with a proof-of-concept exploit publicly leaked by the ShinyHunters ...