Search: “Oracle HTTP Server”

Oracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 2

CISA added actively exploited Oracle flaw CVE-2026-21962 to the KEV catalog; it allows remote unauthorized access to Oracle HTTP Server and WebLogic Proxy Plug-in.

Canada's Cyber Centre updated advisory AV26-042 on Oracle's January 2026 quarterly rollup, reporting that CISA added CVE-2026-21962 to the Known Exploited Vulnerabilities catalog on August 24, 2026. The flaw affects the Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in in Oracle Fusion Middleware and may allow a remote attacker to obtain unauthorized access. A public proof of concept has been available since January 21, 2026, and fixes shipped in Oracle's January 20, 2026 advisory covering multiple products.

Canadian Centre for Cyber Security·Aug 24, 18:42 UTC · 22d agoExploit / PoC in the wildCVE-2026-21962

U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog

CISA added the actively exploited Gitea RCE flaw CVE-2026-60004 (CVSS 9.8) to its KEV catalog, with federal patching due by August 28, 2026.

CISA added CVE-2026-60004, a critical remote code execution flaw in Gitea (CVSS 9.8), to its Known Exploited Vulnerabilities catalog. The flaw affects Gitea versions since 1.17, fixed in 1.27.1, and lets attackers with repository write access execute shell commands via the diffpatch API and Git hooks. Open registration allows unauthenticated attackers to create accounts and exploit exposed instances, with a reported attack deploying a cryptocurrency-miner-like payload.

Security Affairs·Aug 26, 08:44 UTC · 21d agoExploit / PoC in the wildCVE-2026-60004

Miniduke: Web Based Infection Vector

Kaspersky Securelist·Mar 11, 18:31 UTC · Mar 11, 2013Exploit / PoCCVE-2013-0422CVE-2012-4792

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

The Hacker News·Jun 4, 08:27 UTC · Jun 4, 2024Exploit / PoC in the wildCVE-2017-3506CVE-2023-21839

U.S. CISA adds Microsoft Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Server, and Microsoft SQL Server bugs to its Known Exploited Vulnerabilities catalog

Security Affairs·Sep 19, 15:48 UTC · Sep 19, 2024Exploit / PoC in the wildCVE-2024-27348CVE-2020-0618CVE-2019-1069+2 CVEs

Experts discovered a flaw in GoAhead that affects hundreds of thousands IoT devices

Security Affairs·Dec 25, 19:16 UTC · Dec 25, 2017Exploit / PoCCVE-2017-17562

CVE-2026-34486: Apache Tomcat EncryptInterceptor Fail-Open Bypass

Technical analysis shows CVE-2026-34486 is a one-line fail-open regression in Tomcat Tribes enabling unauthenticated RCE via Java deserialization.

CVE-2026-34486 is a fail-open regression in Tomcat's Tribes EncryptInterceptor, introduced while fixing the CVE-2026-29146 padding-oracle flaw; Apache rated it Important and NVD scores it 7.5 High. Decryption failures are now forwarded to an unfiltered ObjectInputStream, and public PoC repositories demonstrate unauthenticated RCE on default port 4000 when clustering, the EncryptInterceptor, a reachable receiver and deserialization gadgets are all present. Affected releases 9.0.116, 10.1.53 and 11.0.20 are fixed in 9.0.117, 10.1.54 and 11.0.21; Tomcat 8.5 is unaffected.

Web discovery (articles for new exploits & KEV entries)·Sep 8, 20:09 UTC · 7d agoExploit / PoCCVE-2026-34486CVE-2026-291461

Cryptocurrency miners aren’t dead yet: Documenting the voracious but simple “Panda”

Cisco Talos·Sep 17, 15:09 UTC · Sep 17, 2019Exploit / PoCCVE-2017-10271CVE-2017-5638