The Hacker News

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated ...
Tech Times on MSN

Oracle proxy flaw CVE-2026-21962 fueled China-linked attacks on 100+ governments

CVE-2026-21962, a CVSS 10.0 Oracle WebLogic proxy flaw exploited by China-linked hackers across government and commercial ...
Infosecurity-magazine.com

Attackers Rapidly Weaponize Critical Oracle WebLogic RCE, Honeypot Study Finds

A critical Oracle WebLogic vulnerability was weaponized almost immediately after public exploit code became available, according to a new honeypot-based analysis covering attack activity between ...
TechRepublic

CISA Flags 2-Year-Old Oracle WebLogic Vulnerability as Actively Exploited

CISA added Oracle WebLogic flaw CVE-2024-21182 to its KEV catalog, giving federal agencies until June 4 to patch exposed servers. A patch that should have retired an Oracle WebLogic vulnerability two ...
ZDNet

Recent Oracle WebLogic zero-day used to infect servers with ransomware

A recently discovered zero-day vulnerability has been abused for over a week to infect Oracle WebLogic servers with at least two strands of ransomware, security researchers from Cisco Talos have told ...