Topic

Oracle Weblogic

Coverage tagged oracle weblogic.

Articles: 2
Desks: 2

Data graphic: a huge 10.0 for the five unauthenticated maximum-score flaws in Oracle's October 2026 CPU, among 1,295 patches, with 9.8s in WebLogic and APEX.

Oracle's October CPU: Patch SOA Suite, Access Manager and EBS Mailer First

Oracle's October 2026 patch update fixes 1,295 flaws. Five unauthenticated CVSS 10.0s in SOA Suite, Access Manager and EBS set the first-week order.

Oct 21 · 3 min

Data graphic: timeline from Oracle's patch on 20 Jan 2026 to CISA's KEV listing on 24 Aug 2026, with the public PoC and first attack on 22 Jan and Imperva's report of more than 140,000 attempts by 26 Jan; CVSS 10.0

stableResearch Oracle Weblogic

Oracle WebLogic CVE-2026-21962: Critical Proxy Bypass Under Mass Exploitation

CVE-2026-21962 is a CVSS 10.0 access-control bypass in Oracle HTTP Server and the WebLogic Proxy Plug-in, exploited since January 2026 and added to CISA KEV. Detection and fixes.

Sep 5 · 11 min