THREATOPS

THREAT OPS › Threat News › CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

highcisa_advisoriesPublished 2026-08-24

<p>CISA has added one new vulnerability to its <a href="https://edit.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.  </p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-21962" target="_blank">CVE-2026-21962</a> Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access

MITRE ATT&CK techniques

VulnerabilitiesT1588.006

Indicators of compromise

CVE-2026-21962cve
https://www.cve.org/CVERecord?id=CVE-2026-21962url
https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3wurl

Original source: https://www.cisa.gov/news-events/alerts/2026/08/24/cisa-adds-one-known-exploited-vulnerability-catalog