Oracle Security Advisory- Update 1 (January 24th, 2026)

Ref# ADV2026_30 | Date: Jan 26th 2026

Oracle published a security advisory highlighting vulnerabilities in the following products on January 20, 2026. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

Update 1 

On January 21, 2026, a proof of concept (PoC) for the vulnerability  CVE-2026-21962 became publicly available. 

CVE-2026-21962 is a vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware which may allow a remote attacker to obtain unauthorized access. 

For more information on these updates, you can follow this URL: 

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary. 

References