CISA Adds Oracle HTTP Server and Weblogic Server Proxy Plug-in Vulnerability (CVE-2026-21962) to Known Exploited Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability, CVE-2026-21962, to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability, an improper access control flaw in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in, is actively being exploited by malicious cyber actors and poses significant risks, requiring federal agencies to prioritize rapid remediation.