CISA adds a critical Oracle vulnerability to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in vulnerability CVE-2026-21962 to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability has a CVSS score of 10.0, and the source describes attacks targeting it.