VulnRadar

Data against noise.

Page generated: 08 Nov 2026, 13:11 UTC

CVE-2026-21962

Read full description

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data. Note: Affected version for Weblogic Server Proxy Plug-in for IIS is 12.2.1.4.0 only. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).

CVSS 10.0 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.9/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 10: +1.50
Fresh EPSS: 73.19%: +0.37

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 21 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

Forbes

Press · 27 Aug 2026, 07:00 · CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug - Forbes

Hackread

Press · 26 Aug 2026, 07:00 · CISA Warns Agencies to Patch Actively Exploited Oracle WebLogic Proxy Flaw - Hackread

Cyber Daily

Press · 26 Aug 2026, 07:00 · Hacked: US cyber agency warns of active exploitation of perfect-10 Oracle WebLogic bug - Cyber Daily

Tech Times

Press · 26 Aug 2026, 07:00 · Oracle Proxy Flaw CVE-2026-21962 Fueled China-Linked Attacks on 100+ Governments - Tech Times

Cyber Security Agency of Singapore

Press · 26 Aug 2026, 07:00 · Active Exploitation of Vulnerability in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-In - Cyber Security Agency of Singapore

See all 21 source documents

The Register

Press · 25 Aug 2026, 07:00 · CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw - The Register

The Hacker News

Press · 25 Aug 2026, 07:00 · Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data - The Hacker News

SecurityWeek

Press · 25 Aug 2026, 07:00 · CISA Warns of Exploited Oracle WebLogic Vulnerability - SecurityWeek

Press · 25 Aug 2026, 07:00 · Actively Exploited Oracle WebLogic Vulnerability Exposes Critical Enterprise Data - LinkedIn

Security Affairs

Press · 25 Aug 2026, 07:00 · U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog - Security Affairs

shattered.io

Press · 19 Jun 2026, 07:00 · WebLogic CVE-2026-21962: 140K Attacks, Patch Now [2026] - shattered.io

The Hacker News

Press · 30 Mar 2026, 07:00 · ⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More - The Hacker News

CloudSEK

Press · 25 Mar 2026, 14:27 · Honey for Hackers: A Study of Attacks Targeting the Recent CVE-2026-21962 and Other Critical WebLogic Vulnerabilities on a High Interactive Oracle Honeypot - CloudSEK

BleepingComputer

Press · 14 Feb 2026, 08:00 · One threat actor responsible for 83% of recent Ivanti RCE attacks - BleepingComputer

Field Effect

Press · 29 Jan 2026, 08:00 · Public PoC and probing reported for max‑severity Oracle Proxy flaw - Field Effect

Trellix

Press · 26 Jan 2026, 08:00 · The Bug Report – January 2026 Edition - Trellix

SOCRadar

Press · 22 Jan 2026, 08:00 · Oracle January 2026 CPU Delivers 337 Security Patches Including CVE-2025-66516 & CVE-2026-21962 - SOCRadar

thestack.technology

Press · 22 Jan 2026, 08:00 · Oracle warns over easily exploitable CVE-2026-21962 - thestack.technology

CyberSecurityNews

Press · 21 Jan 2026, 08:00 · Critical Oracle WebLogic Server Proxy Vulnerability Lets Attackers Compromise the Server - CyberSecurityNews

Hong Kong Computer Emergency Response Team Coordination Centre

Press · 21 Jan 2026, 08:00 · Oracle Products Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre

Arctic Wolf

Press · 20 Jan 2026, 08:00 · Recommendation for CVE-2026-21962 - Arctic Wolf

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.9 (2026-11-02 15:14). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 10; EPSS 73.2%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: network access, no prior privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 14:00:01.230559+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

First press mention

20 Jan 2026, 08:00

Published

20 Jan 2026, 21:56

Added to the CISA KEV catalog

24 Aug 2026, 00:00

Latest press mention

27 Aug 2026, 07:00

Score calculated

05 Nov 2026, 14:00