CISA Adds Actively Exploited Oracle WebLogic Server Vulnerability to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a maximum-severity security flaw (CVE-2026-21962) affecting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog. This vulnerability allows unauthenticated attackers with network access via HTTP to compromise the servers, potentially leading to unauthorized access or modification of critical data. CISA's inclusion in the KEV catalog indicates evidence of active exploitation.