Oracle issues out-of-band updates to patch CVE-2026-21992, a critical vulnerability in Identity Manager and Web Services ...
Attackers can execute arbitrary code without authentication if Oracle's Identity or Web Services Managers are exposed to the Web.