Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:oracle:http_server:14.1.2.0.0:*:*:*:*:*:*:*

1 brief RSS
high threat

Active Exploitation of Oracle HTTP Server and WebLogic Server Proxy Plug-in

CISA has added CVE-2026-21962 to the Known Exploited Vulnerabilities (KEV) Catalog due to confirmed in-the-wild exploitation of an improper access control vulnerability in Oracle HTTP and WebLogic proxy components.

exploited PoC Oracle HTTP Server +4
1c