Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Summary
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Oracle:HTTP Server and Oracle Weblogic Server Proxy Plug-in
- :
Sources
- CISA KEV DATABASE
- NVD DATABASE
CH-4 Twitter/X Fair-Use Reference
This reference follows the DR-006 + DR-008 fair-use boundary: ≤280-char verbatim quote, mandatory @attribution, mandatory outbound link. No account mirroring and no third-party tracker widget loaded.
Original author
Read tweet ↗ · Tweets may be deleted or accounts suspended; see the R2 archive if the original is unreachable.
Original Links
- https://www.oracle.com/security-alerts/cpujan2026.html reference
- https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk reference
- https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk reference
- https://nvd.nist.gov/vuln/detail/CVE-2026-21962 reference
- https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1 Broken Link
- https://web.archive.org/web/20260129165916/https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1 Issue Tracking
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21962 US Government Resource
- https://x.com/0xacb/status/2015473216844620280 Not Applicable
Timeline
- kev_ingest CISA KEV
- nvd_ingest NVD