Exploit for Improper Access Control in Oracle Http Server

CVE-2026-21962

githubexploit · 2026-08-29

Description

Exploit for improper access control in Oracle HTTP Server.

Affected software

Oracle Http Server= 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0

Oracle Weblogic Server Proxy Plug-in= 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0

All known vulnerabilities by product

Oracle Http Server Oracle Weblogic Server Proxy Plug-In

CVSS 10.0 for CVE-2026-21962

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:NONE

Working code

90%confidence this exploit runs

Based on 5 file(s) in the source

Exploit Details

Modified:2026-08-29 09:21

Last Seen:2026-08-29 09:21

Reporter:KaiserdesMonats

Written in:CSS

Last commit:2026-08-29

Other exploits for CVE-2026-21962

CVE-2026-21962

2026-08-28 KitPloitKITPLOIT

CVE-2026-21962

2026-08-27 KitPloitKITPLOIT

CVE-2026-21962

2026-08-27 KitPloitKITPLOIT

CVE-2026-21962

2026-08-27 KitPloitKITPLOIT

CVE-2026-21962-o

2026-08-27 KitPloitKITPLOIT

cve-2026-21962

2026-08-27 KitPloitKITPLOIT

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

2026-08-27 KitPloitKITPLOIT

Ashwesker-CVE-2026-21962

2026-08-27 KitPloitKITPLOIT

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=F1582000-5CE2-5800-9E40-4416850D6864
CVE-2026-21962 Açığı için blog sayfası oluşturdum.

Exploit Code

Share

Share on social media: