CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operat

Back to dashboard

Threat ModerateSingle SourceAgencyConf ConfirmedUnited States · North AmericaPublishedCERT

Original publisher

CERT

Original source URL

https://www.cisa.gov/news-events/alerts/2026/08/24/cisa-adds-one-known-exploited-vulnerability-catalog

Source country

United States

Reporting region

North America

Language

Institution

CISA US-CERT

Published (UTC)

Aug 24, 2026, 12:00 PM

Ingested (UTC)

Aug 28, 2026, 4:35 AM

Verification

Single Source

BASE INTEL aggregates public reporting. This item is not authored by BASE INTEL. Always review the original publisher before relying on the content.

CISA Adds One Known Exploited Vulnerability to Catalog
Advisory ID: node-25347
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.   CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operat
Severity: moderate
Published (UTC): 2026-08-24T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/news-events/alerts/2026/08/24/cisa-adds-one-known-exploited-vulnerability-catalog

View original source

Related reports on this event

Separate source reports grouped by topic. Conflicting claims remain distinct.

Threat ModerateSingle SourceAgency

Cyber

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-60004 Gitea Code Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Base

certadvisorynode-25351

CERTUnited States · North America

Aug 25, 2026, 12:00 PM UTC