> TritonInfoSec News
Home / Aug 26, 2026 / Story
0
#1 The Hacker News general August 25, 2026 at 06:12 UTC

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

By [email protected] (The Hacker News)

AI Summary

CISA added CVE-2026-21962 (CVSS 10.0) to its Known Exploited Vulnerabilities catalog — a maximum-severity unauthenticated RCE flaw affecting Oracle HTTP Server and Oracle WebLogic Server exploitable via HTTP without credentials. Security teams running WebLogic should treat this as an emergency patch priority given the CVSS 10.0 score and confirmed active exploitation in the wild.

Read full article → https://thehackernews.com/2026/08/actively-exploit…

Relevance score: 88.0/100

# More from August 26

  1. 2
    Hackers breached over 270 Zimbra servers in ongoing attacks BleepingComputer
  2. 3
    Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access The Hacker News
  3. 4
    Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows The Hacker News
  4. 5
    A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw The Hacker News
  5. 6
    Police arrests dozens of suspects in global cybercrime crackdown BleepingComputer
  6. 7
    US sanctions Iranian cyber actors as UK discloses power plant attack The Record
  7. 8
    AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes BleepingComputer
  8. 9
    ToxicPanda Banking Trojan Matures into Enterprise Threat Dark Reading
  9. 10
    TikTok reaches $400M settlement with US over COPPA violations BleepingComputer