CISA has added CVE-2024-21182, a high-severity Oracle WebLogic Server flaw, to its Known Exploited Vulnerabilities Catalog after evidence of active exploitation. The issue can let an unauthenticated attacker with network access compromise affected servers, and federal agencies are urged to patch by June 4, 2026. #OracleWebLogicServer #CISA #CVE-2024-21182...

CISA has ordered federal agencies to patch the actively exploited Oracle WebLogic Server flaw CVE-2024-21182, which affects versions 12.2.1.4.0 and 14.1.1.0.0 and can be abused remotely by unauthenticated attackers. Shodan shows more than 1,592 exposed vulnerable servers online, and CISA is urging all defenders to apply mitigations or stop using the product if protections are unavailable. #OracleWebLogicServer #CVE-2024-21182 #CISA

Angreifer missbrauchen eine Sicherheitslücke in Oracle HTTP-Server und Weblogic Server, die komplette Kompromittierung ermöglicht.

CISA has ordered government organizations to urgently patch CVE-2026-21962, a critical unauthenticated remote code execution flaw affecting Oracle HTTP Server and the WebLogic Server Proxy plugin. The vulnerability has been actively exploited since January in attacks against Oracle WebLogic servers, with reporting tied to CloudSEK, FalconFeeds, SOCRadar, and a China-linked threat...

TL;DR Oracle patched nine flaws in WebLogic Server in a special August 2026 update. Five carry critical scores. The top Oracle WebLogic vulnerability, CVE-2026-60702, scores a CVSS of 9.9. Successful attacks can result in a full takeover of Oracle WebLogic Server. Why it matters WebLogic Server runs core enterprise applications. A takeover there is severe. Five flaws in this Oracle WebLogic vulnerability set score 9.8 or higher.

TL;DR Oracle patched 11 flaws in the WebLogic Server Core component this July. Most allow a full Oracle WebLogic Server takeover. The top issue, CVE-2026-60206, carries a CVSS score of 9.9 and can spread beyond the server itself. Why it matters WebLogic Server runs critical Java applications in many enterprises. It also sits exposed to networks, which makes it a favourite target.

Daily Recap, Multiple vendors issued urgent zero-day patches across Android, Oracle WebLogic, and Wave 7 routers, while new weaknesses in VS Code and the WordPress Kirki plugin raised token-theft and admin-hijack concerns. Attack activity also escalated with the WeedHack campaign impacting over 116,000 Minecraft systems, the Kali365 phishing kit expanding to target AWS and Okta, and Gamaredon delivering GammaWorm and GammaSteel via WinRAR. #Google #Oracle #Acer #Android #OracleWebLogic #CVE-2024-21182 #Wave7 #VSCode #WordPress #Kirki #GitHub #WeedHack #CountLoader #Minecraft #Kali365 #AWS #Okta #MetaAI #Instagram #Gamaredon #WinRAR #GammaWorm #GammaSteel #Ukraine #CISA #FBI #MicrosoftExchangeOnline #Coreutils #DoD

A high-interaction honeypot emulating an unpatched Oracle WebLogic Server (v14.1.1.0.0) recorded immediate and widespread exploitation attempts against the newly disclosed unauthenticated RCE CVE-2026-21962, plus continued scans targeting older critical WebLogic RCEs over a 12-day period (Jan 22–Feb 3, 2026). Attackers quickly weaponized the public exploit and used rented VPS (e.g., DigitalOcean, HOSTGLOBAL.PLUS), automated scanners (libredtail-http, Nmap NSE) and common techniques like path traversal and Java deserialization to gain RCE, underscoring urgent patching and layered defenses. #CVE-2026-21962 #OracleWebLogic

New Linux malware 'Hadooken' targets Oracle Weblogic, deploys crypto miners and DDoS botnet. Exploits vulnerabilities for lateral movement.

Aufgrund eines kritischen WebLogic-Fehlers rät Oracle dri...

3 CVEs added to CISA's catalog