Aug 262026 Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data CISA adds actively exploited CVE-2026–21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated HTTP access.