{"uuid": "a5c3cb32-1cff-444d-a75f-a338555d6730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/41489", "content": "Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager\n\nOracle has released security updates to address a critical security flaw impacting Identity Manager and Web Services Manager that could be exploited to achieve remote code execution.\nThe vulnerability, tracked as CVE-2026-21992, carries a CVSS score of 9.8 out of a maximum of 10.0.\n\"This vulnerability is remotely exploitable without authentication,\" Oracle said in an advisory. \"If successfully\nhttps://thehackernews.com/2026/03/oracle-patches-critical-cve-2026-21992.html", "creation_timestamp": "2026-07-19T00:00:25.601207Z"}