Back to the CVE list
CVE-2026-21962 CISA KEV · Actively exploitedSuited to automated attack · CISA

Vulnerability in Oracle Corporation Oracle HTTP Server, Oracle Weblogic Server Proxy Plug In

CVSS score

10.0

EPSS probability

%73.2

Risk score

14.6

Published

8 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

CVE-2026-21962

Public PoC

Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0.

Public PoC

gregk4sec/cve-2026-21962

Public PoC

CVE Finder

Public PoC

CVE-2026-21962 Açığı için blog sayfası oluşturdum.

Public PoC

naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool

Public PoC

Unauthenticated vulnerability that may allow remote attackers to compromise confidentiality and integrity, potentially leading to full system compromise.

Public PoC

CVE-2026-21962-EXP

Public PoC

zeetee1235/CVE-2026-21962

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-21962"