Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data 2026-08-25 at 09:12 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-21962 […]