{"schema":"vulnpedia.research/1","cve":"CVE-2026-21962","references":[{"url":"https://www.oracle.com/security-alerts/cpujan2026.html","tags":["vendor-advisory","Patch","Vendor Advisory"],"source":"mitre","sourceId":"oracle","modified":"2026-01-20T21:56:32.665Z","origins":[{"source":"mitre","sourceId":"oracle","modified":"2026-01-20T21:56:32.665Z","url":"https://www.oracle.com/security-alerts/cpujan2026.html"},{"source":"nvd","sourceId":"CVE-2026-21962","modified":"2026-08-25T04:18:11.067","url":"https://www.oracle.com/security-alerts/cpujan2026.html"}]},{"url":"https://x.com/0xacb/status/2015473216844620280","tags":["Not Applicable"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-25T03:55:46.348Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-25T03:55:46.348Z","url":"https://x.com/0xacb/status/2015473216844620280"},{"source":"nvd","sourceId":"CVE-2026-21962","modified":"2026-08-25T04:18:11.067","url":"https://x.com/0xacb/status/2015473216844620280"}]},{"url":"https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1","tags":["Broken Link","Not Applicable"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-25T03:55:46.348Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-25T03:55:46.348Z","url":"https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1"},{"source":"nvd","sourceId":"CVE-2026-21962","modified":"2026-08-25T04:18:11.067","url":"https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1"}]},{"url":"https://web.archive.org/web/20260129165916/https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1","tags":["Issue Tracking"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-25T03:55:46.348Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-25T03:55:46.348Z","url":"https://web.archive.org/web/20260129165916/https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1"},{"source":"nvd","sourceId":"CVE-2026-21962","modified":"2026-08-25T04:18:11.067","url":"https://web.archive.org/web/20260129165916/https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21962","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-25T03:55:46.348Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-25T03:55:46.348Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21962"},{"source":"nvd","sourceId":"CVE-2026-21962","modified":"2026-08-25T04:18:11.067","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21962"}]},{"source":"euvd","sourceId":"EUVD-2026-3550","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-3550","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-3550","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-3550"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.greynoise.io/blog/active-ivanti-exploitation","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","url":"https://www.greynoise.io/blog/active-ivanti-exploitation"}]},{"url":"https://www.cloudsek.com/blog/honey-for-hackers-a-study-of-attacks-targeting-the-recent-cve-2026-21962-and-other-critical-weblogic-vulnerabilities-on-a-high-interactive-oracle-honeypot","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","url":"https://www.cloudsek.com/blog/honey-for-hackers-a-study-of-attacks-targeting-the-recent-cve-2026-21962-and-other-critical-weblogic-vulnerabilities-on-a-high-interactive-oracle-honeypot"}]},{"url":"https://falconfeeds.io/blogs/cybercrime-supply-chain-shadow-agents-threat-actor-ecosystem/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","url":"https://falconfeeds.io/blogs/cybercrime-supply-chain-shadow-agents-threat-actor-ecosystem/"}]},{"url":"https://socradar.io/blog/snowlight-government-chinese-campaign/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","url":"https://socradar.io/blog/snowlight-government-chinese-campaign/"}]},{"url":"https://previdian.com/CVE-2026-21962","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","url":"https://previdian.com/CVE-2026-21962"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]},{"url":"https://vulncheck.com/xdb/966aab643cb1","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"966aab643cb1","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"966aab643cb1","modified":"2026-02-10T00:00:00Z","url":"https://vulncheck.com/xdb/966aab643cb1"}]},{"url":"https://github.com/0xBlackash/CVE-2026-21962","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"966aab643cb1","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"966aab643cb1","modified":"2026-02-10T00:00:00Z","url":"https://github.com/0xBlackash/CVE-2026-21962"}]},{"url":"https://vulncheck.com/xdb/bab6f93193ed","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"bab6f93193ed","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"bab6f93193ed","modified":"2026-02-10T00:00:00Z","url":"https://vulncheck.com/xdb/bab6f93193ed"}]},{"url":"https://github.com/zeetee1235/CVE-2026-21962","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"bab6f93193ed","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"bab6f93193ed","modified":"2026-02-10T00:00:00Z","url":"https://github.com/zeetee1235/CVE-2026-21962"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/samael0x4/CVE-2026-21962","source":"poc-in-github","sourceId":"CVE-2026-21962","description":"Unauthenticated vulnerability that may allow remote attackers to compromise confidentiality and integrity, potentially leading to full system compromise.","modified":"2026-08-31T11:12:26Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/samael0x4/CVE-2026-21962"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-08-31T11:12:26Z","url":"https://github.com/samael0x4/CVE-2026-21962"}],"tags":[]},{"url":"https://github.com/boroeurnprach/Ashwesker-CVE-2026-21962","source":"poc-in-github","sourceId":"CVE-2026-21962","description":"CVE-2026-21962","modified":"2026-09-11T07:10:26Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/boroeurnprach/Ashwesker-CVE-2026-21962"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-09-11T07:10:26Z","url":"https://github.com/boroeurnprach/Ashwesker-CVE-2026-21962"}],"tags":[]},{"url":"https://github.com/ThumpBo/CVE-2026-21962","source":"poc-in-github","sourceId":"CVE-2026-21962","description":"CVE-2026-21962-EXP","modified":"2026-06-22T11:04:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/ThumpBo/CVE-2026-21962"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-06-22T11:04:56Z","url":"https://github.com/ThumpBo/CVE-2026-21962"}],"tags":[]},{"url":"https://github.com/gregk4sec/CVE-2026-21962-o","source":"poc-in-github","sourceId":"CVE-2026-21962","description":"CVE Finder","modified":"2026-03-08T07:00:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/gregk4sec/CVE-2026-21962-o"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-03-08T07:00:03Z","url":"https://github.com/gregk4sec/CVE-2026-21962-o"}],"tags":[]},{"url":"https://github.com/George0Papasotiriou/CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-","source":"poc-in-github","sourceId":"CVE-2026-21962","description":"Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0.","modified":"2026-04-18T07:36:29Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/George0Papasotiriou/CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-04-18T07:36:29Z","url":"https://github.com/George0Papasotiriou/CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-"}],"tags":[]},{"url":"https://github.com/gregk4sec/cve-2026-21962","source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-08-29T11:08:25Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/gregk4sec/cve-2026-21962"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-08-29T11:08:25Z","url":"https://github.com/gregk4sec/cve-2026-21962"}],"tags":[]},{"url":"https://github.com/naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool","source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-08-26T04:02:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-08-26T04:02:15Z","url":"https://github.com/naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-21962","source":"poc-in-github","sourceId":"CVE-2026-21962","description":"CVE-2026-21962","modified":"2026-09-16T03:32:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/0xBlackash/CVE-2026-21962"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-09-16T03:32:27Z","url":"https://github.com/0xBlackash/CVE-2026-21962"}],"tags":[]},{"url":"https://github.com/zeetee1235/CVE-2026-21962","source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-08-29T06:11:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/zeetee1235/CVE-2026-21962"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-08-29T06:11:07Z","url":"https://github.com/zeetee1235/CVE-2026-21962"}],"tags":[]},{"url":"https://github.com/KaiserdesMonats/CVE-2026-21962-Blog","source":"poc-in-github","sourceId":"CVE-2026-21962","description":"CVE-2026-21962 Açığı için blog sayfası oluşturdum.","modified":"2026-09-06T14:07:45Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21962","url":"https://github.com/KaiserdesMonats/CVE-2026-21962-Blog"},{"source":"poc-in-github","sourceId":"CVE-2026-21962","modified":"2026-09-06T14:07:45Z","url":"https://github.com/KaiserdesMonats/CVE-2026-21962-Blog"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"966aab643cb1","url":"https://vulncheck.com/xdb/966aab643cb1","cve":"CVE-2026-21962","dateAdded":"2026-04-24T20:08:06Z","modified":"2026-02-10T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/0xBlackash/CVE-2026-21962","observations":[{"dateAdded":"2026-04-24T20:08:06Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"966aab643cb1","modified":"2026-02-10T00:00:00Z","url":"https://vulncheck.com/xdb/966aab643cb1"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"bab6f93193ed","url":"https://vulncheck.com/xdb/bab6f93193ed","cve":"CVE-2026-21962","dateAdded":"2026-08-28T14:53:42Z","modified":"2026-02-10T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/zeetee1235/CVE-2026-21962","observations":[{"dateAdded":"2026-08-28T14:53:42Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"bab6f93193ed","modified":"2026-02-10T00:00:00Z","url":"https://vulncheck.com/xdb/bab6f93193ed"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-02-10T00:00:00Z","modified":"2026-02-10T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Oracle","product":"HTTP Server and Oracle Weblogic Server Proxy Plug-in","dueDate":"2026-08-27T00:00:00Z","cisaDateAdded":"2026-08-24T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","modified":"2026-02-10T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","catalog":"VulnCheck KEV","kind":"report","url":"https://www.greynoise.io/blog/active-ivanti-exploitation","dateAdded":"2026-02-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","url":"https://www.greynoise.io/blog/active-ivanti-exploitation"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cloudsek.com/blog/honey-for-hackers-a-study-of-attacks-targeting-the-recent-cve-2026-21962-and-other-critical-weblogic-vulnerabilities-on-a-high-interactive-oracle-honeypot","dateAdded":"2026-03-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","url":"https://www.cloudsek.com/blog/honey-for-hackers-a-study-of-attacks-targeting-the-recent-cve-2026-21962-and-other-critical-weblogic-vulnerabilities-on-a-high-interactive-oracle-honeypot"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","catalog":"VulnCheck KEV","kind":"report","url":"https://falconfeeds.io/blogs/cybercrime-supply-chain-shadow-agents-threat-actor-ecosystem/","dateAdded":"2026-06-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","url":"https://falconfeeds.io/blogs/cybercrime-supply-chain-shadow-agents-threat-actor-ecosystem/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","catalog":"VulnCheck KEV","kind":"report","url":"https://socradar.io/blog/snowlight-government-chinese-campaign/","dateAdded":"2026-07-31T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","url":"https://socradar.io/blog/snowlight-government-chinese-campaign/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-21962","dateAdded":"2026-08-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","url":"https://previdian.com/CVE-2026-21962"},{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","dateAdded":"2026-09-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21962","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]}]}