Oracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 2

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Jak se o tom psalo 3

1. 24. 8. 2026 20:42 · Cyber Centre Kanada CA nadpis události

   Oracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 2

   Serial number: AV26-042Date: January 21, 2026Updated: August 24, 2026 On January 20, 2026, Oracle published a security advisory to address vulnerabilities in multiple products. Update 1 On January 21, 2026, a proof of concept (PoC) for the vulnerability CVE-2026-21962 became publicly available. CVE-2026-21962 is a vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware which may allow a remote attacker to obtain unauthorized access.…

2. 24. 8. 2026 · zachyceno 21:30 · CISA Advisories US

   CISA Adds One Known Exploited Vulnerability to Catalog

   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability…

3. 24. 8. 2026 · zachyceno 21:00 · CISA KEV US

   Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability (CVE-2026-21962)

   CISA added CVE-2026-21962 to the Known Exploited Vulnerabilities catalog. Affected product: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in. Remediation due date: 2026-08-27.