Description
该漏洞允许未经认证的远程攻击者通过 HTTP 攻破受影响服务器，而无需登录凭证。
WebLogic Server Proxy Plug-in 存在远程命令执行漏洞（CVE-2026-21962）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2026-21962
https://www.oracle.com/security-alerts/cpujan2026.html
https://www.netspi.com/blog/executive-blog/critical-vulnerability/oracle-weblogic-server-proxy-plugin-cve-2026-21962-overview-takeaways/
https://arcticwolf.com/resources/blog/cve-2026-21962/
https://www.tenable.com/cve/CVE-2026-21962
https://www.sentinelone.com/vulnerability-database/cve-2026-21962/
https://github.com/naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool
https://www.cloudsek.com/blog/honey-for-hackers-a-study-of-attacks-targeting-the-recent-cve-2026-21962-and-other-critical-weblogic-vulnerabilities-on-a-high-interactive-oracle-honeypot
https://isc.sans.edu/diary/32662
https://cn-sec.com/archives/4954374.html
https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21962