CISA Warns of Exploited Oracle WebLogic Vulnerability
CISA has issued a warning regarding CVE-2026-21962, an Oracle WebLogic vulnerability that is being actively exploited by threat actors in the wild. The flaw has seen widespread exploitation targeting WebLogic server deployments, prompting the alert from the cybersecurity agency.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-21962 (CVSS score: 10.0), allows an unauthenticated attacker with network access via HTTP to
A zero-day elevation-of-privilege vulnerability tracked as CVE-2026-69414, dubbed ShieldBreak, affects the Microsoft Malware Protection Engine used by Microsoft Defender, enabling local attackers with low privileges to escalate to SYSTEM level access. With a public proof-of-concept released on August 12, 2026, and no patch currently available despite CVE assignment on August 14, CISA has issued BOD 26-04 requiring remediation within 14 days. Qualys VMDR offers detection capabilities for this critical flaw affecting a widely deployed security component.
CISA has issued a three-day deadline for federal agencies to patch a Zimbra vulnerability (CVE-2026-73570) that enables complete takeover of user communications. The flaw is reportedly being actively exploited in the wild, underscoring the critical nature of the threat. The compressed patching timeline reflects the urgency of mitigating this high-severity vulnerability before adversaries can gain further access to agency systems.