CISA Adds Critical Oracle CVE-2026-21962 to KEV Catalog 🔗 https:// cybersecurefox.com/en/cisa-ora cle-cve-2026-21962-kev-critical-vulnerability # CVE -2026-21962 # Oracle # HTTP # Server # Oracle # W
mastodon:infosec-exchange 32d ago
sys/dev/i2c [netbsd-11]: adt7462.c adt7462reg.h martin: Pull up following revision(s) (requested by jdc in ticket #478): http:// cvsweb.netbsd.org/bsdweb.cgi/s rc/sys/dev/i2c/adt7462.c.diff?r1=1.3.2.2&r2=1.3.2.3 http:// cvsweb.netbsd.org/bsdweb.cgi/s rc/sys/dev/i2c/adt7462reg.h.d
CISA warned that the CVE-2026-21962 Oracle flaw with a CVSS 10 score is actively exploited in the wild. Patch Oracle Fusion Middleware systems now.
Oracle sent a force majeure notice to Blue Owl Capital's development unit regarding Project Jupiter, a Stargate data center campus in New Mexico, citing permit delays by local officials. Oracle may seek to delay lease payments as the facility cannot be powered without necessary permits.
0 flaws in Fusion Middleware and a critical E-Business Suite RCE exploited in the Estée Lauder data breach. **Apply Oracle's July 2026 Critical Patch Update as soon as possibla.
Windows XP cumple 25 años https:// blog.elhacker.net/2026/08/wind ows-xp-cumple-25-anos.html
🟠 HOCH · Devolutions Server: mehrere Schwachstellen CERT-Bund (BSI) https://www.
Google Warns of ShinyHunters' Fresh Oracle PeopleSoft Campaign - SecurityWeek https://www.
🟠 HOCH · Oracle Database Producten: mehrere Schwachstellen NCSC-NL https://www.
8): unauthenticated Java deserialization RCE in Oracle PeopleSoft PSEMHUB. UNC6240 (ShinyHunters-linked) bypasses WAFs by requesting /%50SEMHUB/hub — string-based rules match the literal path before URL-decoding.
On 2026-08-24, CISA added CVE-2026-21962 (Oracle HTTP Server and Weblogic Server Proxy Plug-in improper access control) to its Known Exploited Vulnerabilities catalog. On 2026-08-25 and 2026-08-26, CISA added six additional known exploited vulnerabilities including CVE-2026-60004 (Gitea code injection) and CVE-2015-3246 (Red Hat Libuser race condition).
Four-time Formula 1 world champion Max Verstappen signed a contract extension with Red Bull Racing on August 20, 2026, committing to the team through 2030. The reported deal value is approximately €460 million, ending months of speculation about his potential move to rival teams.
Larry Ellison has pledged 67 million more shares of Oracle Corp. as collateral for personal loans than he had at the same time last year.
At least six separate CVEs were disclosed affecting Oracle products (WebLogic, Agile, Banking, WebCenter), OpenRemote, and GNU diffutils. Vulnerabilities range from authentication bypass to unauthorized data access, with Oracle WebLogic CVE-2026-60206 rated critical (CVSS 9.9) and publicly exploited.
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers.
From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET AJAX https:// tantosec.com/blog/2026/09/tele rik-padding-oracle-to-shell/
Oracle founder Larry Ellison announced a plan on September 12, 2026, to sell up to 50 million shares worth approximately $7.5 billion, then canceled the plan shortly thereafter on the same day. No shares were sold under the arrangement, which was set to expire later in 2026.
Six critical and high-severity vulnerabilities disclosed: DD-WRT stack buffer overflow (CVE-2021-27137), Langflow code execution flaws (CVE-2026-0770, CVE-2026-55255), WordPress Core interpretation conflict (CVE-2026-63030), Microsoft AD FS access control gap (CVE-2026-56155), and Oracle E-Business Suite privilege escalation (CVE-2026-46817). All pose remote compromise risks.
Between 2 and 3 September 2026, six enterprise AI companies announced new products and partnerships: Reducto unveiled its r-1 model for document processing at $0.01 per document, Archive Intel partnered with Zocks for AI compliance, Cohesity launched a managed clean room, Airrived released a sovereign AI platform, SEON expanded via Exist Software Labs partnership, and Altruist introduced AI financial planning.
Security alerts spanning 25–26 September 2026 reported: placeholder third-party.com serving malware across 1,700+ repositories, compromised GitHub Actions resuming Mini Shai-Hulud malware execution, Elementor CSRF vulnerability enabling site takeovers, and Kiteworks urging customers to shut down systems for nine hours over suspected cyber attack.
Oracle's quarterly revenue beats estimates as AI boom drives cloud demand Reuters
Oracle terminated approximately 21,000 employees (13% of workforce) to finance a $300 billion computing agreement with OpenAI. The layoffs triggered a credit rating downgrade and significant power grid infrastructure commitments.