CVE-2026-21962

CVSS

—

EPSS

0.709 (99.4th percentile)

CISA KEV

Added 2026-08-24, due 2026-08-27

Exploitation

No report

Public exploits

10 repositories

State

Unknown

Coverage

• ● Actively exploitedCritical 85CISA advisories & alerts24 Aug, 12:00

  CISA Adds One Known Exploited Vulnerability to Catalog

  CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability This type of vulnerability is a frequent attack…

  ↗cisa.gov/news-events/alerts/2026/08/24/cisa-add…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:46poc publishedpoc-in-github
2. 24 Sept, 12:27poc publishedpoc-in-github
3. 24 Sept, 12:14poc publishedpoc-in-github
4. 24 Sept, 11:51poc publishedpoc-in-github
5. 24 Sept, 11:50kev addedcisa-kev