Oracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 2

Malware News
1

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number: </strong>AV26-042<br /><strong>Date: </strong>January&nbsp;21, 2026<br /><strong>Updated: </strong>August&nbsp;24, 2026</p>

On January 20, 2026, Oracle published a security advisory to address vulnerabilities in multiple products.

Update 1

On January 21, 2026, a proof of concept (PoC) for the vulnerability CVE-2026-21962 became publicly available.

CVE-2026-21962 is a vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware which may allow a remote attacker to obtain unauthorized access.

Update 2

On August 24, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-21962 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

</div>

Article Link: Oracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 2 - Canadian Centre for Cyber Security