Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data Oracle WebLogic漏洞遭主动利用，未认证攻击者可访问关键数据

TL;DR

• CISA added CVE-2026-21962, a maximum-severity (CVSS 10.0) vulnerability, to its Known Exploited Vulnerabilities catalog
• The flaw impacts Oracle HTTP Server and Oracle WebLogic Server
• Evidence of active exploitation in the wild has been confirmed
• The vulnerability allows unauthenticated remote code execution over HTTP

Why It Matters

This is a critical security advisory for any organization running Oracle middleware infrastructure. With a perfect CVSS score and confirmed active exploitation, immediate patching and remediation are essential to prevent compromise.

Technical Details

• CVE ID: CVE-2026-21962
• CVSS Score: 10.0 (Maximum severity)
• Affected Products: Oracle HTTP Server, Oracle WebLogic Server
• Attack Vector: Unauthenticated, network-accessible via HTTP
• Classification: Known Exploited Vulnerability (KEV) per CISA

Industry Insight

• Organizations should prioritize patching Oracle HTTP Server and WebLogic Server immediately, given active exploitation is confirmed
• This highlights the ongoing risk of unauthenticated remote code execution flaws in widely deployed enterprise middleware
• CISA's KEV catalog inclusion signals urgency — delay in remediation increases exposure to targeted attacks

摘要

CISA将CVE-2026-21962（CVSS 10.0最高严重性漏洞）添加到其已知利用漏洞目录中
该漏洞影响Oracle HTTP Server和Oracle WebLogic Server
已确认存在野外活跃利用的证据
该漏洞允许通过HTTP进行未认证的远程代码执行

深度分析

简要说明

• CISA将CVE-2026-21962（CVSS 10.0最高严重性漏洞）添加到其已知利用漏洞目录中
• 该漏洞影响Oracle HTTP Server和Oracle WebLogic Server
• 已确认存在野外活跃利用的证据
• 该漏洞允许通过HTTP进行未认证的远程代码执行

为何重要

这是针对运行Oracle中间件基础设施的任何组织的关键安全公告。凭借完美的CVSS评分和已确认的活跃利用，立即修补和补救对于防止系统被攻陷至关重要。

技术细节

• CVE编号： CVE-2026-21962
• CVSS评分： 10.0（最高严重性）
• 受影响产品： Oracle HTTP Server、Oracle WebLogic Server
• 攻击向量： 未认证，可通过HTTP网络访问
• 分类： 根据CISA标准属于已知利用漏洞（KEV）

行业洞察

• 鉴于已确认存在活跃利用，组织应立即优先修补Oracle HTTP Server和WebLogic Server
• 这凸显了广泛部署的企业中间件中未认证远程代码执行漏洞的持续风险
• CISA将其纳入KEV目录表明情况紧急——补救延迟会增加遭受定向攻击的风险