A WebLogic proxy plug-in patched in January is now under active exploitation

CVE-2026-21962, a CVSS 10.0 access-control flaw in Oracle’s WebLogic Server proxy plug-in that was fixed in the January 2026 CPU, landed in CISA’s KEV catalog on August 24 with confirmed active exploitation. Apply the January patch before August 27 and inventory your middleware tier, which vulnerability scans too often miss.