CISA Directs Federal Agencies to Patch Exploited Oracle Flaw Within 72 Hours

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Oracle vulnerability (CVE-2026-21962) to its Known Exploited Vulnerabilities catalog. Federal civilian executive branch agencies are mandated to patch this "improper access control" issue, affecting Oracle's HTTP and WebLogic servers, within 72 hours due to active exploitation. This urgent directive aims to mitigate significant cybersecurity risks.