CVE-2026-83021

Severity: critical (CVSS 10.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-15 · updated 2026-09-28
Weakness: CWE-287

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

Summary

CVE-2026-83021 is a critical vulnerability in the Web Container component of Oracle WebLogic Server that can be exploited remotely over HTTP without authentication, allowing an attacker to take over the server and potentially impact other products. Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0 are affected. It is not listed in CISA KEV and no exploitation has been reported, with a low EPSS 30-day exploitation probability of 0.5%. Apply the Oracle CPU fix for the affected versions and restrict network access to the WebLogic HTTP interfaces until patched.

تُعد CVE-2026-83021 ثغرة حرجة في مكوّن Web Container ضمن Oracle WebLogic Server، ويمكن استغلالها عن بُعد عبر HTTP دون مصادقة، ما يتيح للمهاجم الاستيلاء على الخادم والتأثير المحتمل في منتجات أخرى. تتأثر الإصدارات 12.2.1.4.0 و14.1.1.0.0 و14.1.2.0.0 من Oracle WebLogic Server. الثغرة غير مدرجة في CISA KEV ولم يُبلَّغ عن استغلال فعلي، واحتمال الاستغلال خلال 30 يوماً وفق EPSS منخفض عند 0.5%. طبّقوا تحديث Oracle CPU للإصدارات المتأثرة وقيّدوا الوصول الشبكي إلى واجهات HTTP في WebLogic حتى إتمام الترقيع.

Affected products

Oracle WebLogic Server: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cspusep2026.html

Get alerted when CVE-2026-83021 or the next vulnerability affects your stack