Critical Vulnerability in Oracle HTTP Server and WebLogic Server Proxy Plug-In (CVE-2026-21962) Under Active Exploitation

A critical vulnerability (CVE-2026-21962) in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-In, with a CVSS v3.1 score of 10.0, is being actively exploited. This flaw allows unauthenticated attackers to gain unauthorized access to critical data, including the ability to create, delete, or modify information. Organizations are urged to patch immediately.