Mar 242026 Oracle Patches Critical CVE-2026–21992 Enabling Unauthenticated RCE in Identity Manager Oracle fixes CVE-2026–21992 (CVSS 9.8) flaw enabling unauthenticated RCE via HTTP, risking full system compromise.