Browse / CVEs / CVE-2026-21962
CVE-2026-21962· oracle / http server and oracle weblogic server proxy plug-in· CWE-284
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Exploited in the wild. Listed by CISA on 2026-08-24; known to be used by ransomware.
73.2%likelihood of exploitation, next 30 days
99%of all CVEs are less likely
Nonecheck to confirm it
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from