Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

Oracle has released security updates to address a critical security flaw impacting Identity Manager and Web Services Manager that could be exploited to achieve remote code execution.
The vulnerability, tracked as CVE-2026-21992, carries a CVSS score of 9.8 out of a maximum of 10.0.
„This vulnerability is remotely exploitable without authentication,“ Oracle said in an advisory. „If successfully
https://thehackernews.com/2026/03/oracle-patches-critical-cve-2026-21992.html