<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 01 Jun 2026 03:34:07 +0000</lastBuildDate>
    <item>
      <title>baa40d03-f836-4354-9a92-74ae0b23bcaf</title>
      <link>https://vulnerability.circl.lu/sighting/baa40d03-f836-4354-9a92-74ae0b23bcaf/export</link>
      <description>{"uuid": "baa40d03-f836-4354-9a92-74ae0b23bcaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mhvef5wpoc2h", "content": "", "creation_timestamp": "2026-03-25T15:04:43.561053Z"}</description>
      <content:encoded>{"uuid": "baa40d03-f836-4354-9a92-74ae0b23bcaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mhvef5wpoc2h", "content": "", "creation_timestamp": "2026-03-25T15:04:43.561053Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/baa40d03-f836-4354-9a92-74ae0b23bcaf/export</guid>
      <pubDate>Wed, 25 Mar 2026 15:04:43 +0000</pubDate>
    </item>
    <item>
      <title>3db5d2f5-e612-4368-85b0-b7c80bf0909e</title>
      <link>https://vulnerability.circl.lu/sighting/3db5d2f5-e612-4368-85b0-b7c80bf0909e/export</link>
      <description>{"uuid": "3db5d2f5-e612-4368-85b0-b7c80bf0909e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mhvef5wpod2h", "content": "", "creation_timestamp": "2026-03-25T15:04:44.111855Z"}</description>
      <content:encoded>{"uuid": "3db5d2f5-e612-4368-85b0-b7c80bf0909e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mhvef5wpod2h", "content": "", "creation_timestamp": "2026-03-25T15:04:44.111855Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3db5d2f5-e612-4368-85b0-b7c80bf0909e/export</guid>
      <pubDate>Wed, 25 Mar 2026 15:04:44 +0000</pubDate>
    </item>
    <item>
      <title>72723b82-decc-4da0-acc4-c527820ee674</title>
      <link>https://vulnerability.circl.lu/sighting/72723b82-decc-4da0-acc4-c527820ee674/export</link>
      <description>{"uuid": "72723b82-decc-4da0-acc4-c527820ee674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mhvef5wqnl2h", "content": "", "creation_timestamp": "2026-03-25T15:04:44.837067Z"}</description>
      <content:encoded>{"uuid": "72723b82-decc-4da0-acc4-c527820ee674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mhvef5wqnl2h", "content": "", "creation_timestamp": "2026-03-25T15:04:44.837067Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/72723b82-decc-4da0-acc4-c527820ee674/export</guid>
      <pubDate>Wed, 25 Mar 2026 15:04:44 +0000</pubDate>
    </item>
    <item>
      <title>1bde2a8e-99da-4fa4-befc-733a75fc517e</title>
      <link>https://vulnerability.circl.lu/sighting/1bde2a8e-99da-4fa4-befc-733a75fc517e/export</link>
      <description>{"uuid": "1bde2a8e-99da-4fa4-befc-733a75fc517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3mhyfivc4fw26", "content": "", "creation_timestamp": "2026-03-26T20:02:38.599928Z"}</description>
      <content:encoded>{"uuid": "1bde2a8e-99da-4fa4-befc-733a75fc517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3mhyfivc4fw26", "content": "", "creation_timestamp": "2026-03-26T20:02:38.599928Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1bde2a8e-99da-4fa4-befc-733a75fc517e/export</guid>
      <pubDate>Thu, 26 Mar 2026 20:02:38 +0000</pubDate>
    </item>
    <item>
      <title>68478431-d0ba-4639-9e6b-761302660614</title>
      <link>https://vulnerability.circl.lu/sighting/68478431-d0ba-4639-9e6b-761302660614/export</link>
      <description>{"uuid": "68478431-d0ba-4639-9e6b-761302660614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhyg54wq2y27", "content": "", "creation_timestamp": "2026-03-26T20:13:57.137585Z"}</description>
      <content:encoded>{"uuid": "68478431-d0ba-4639-9e6b-761302660614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhyg54wq2y27", "content": "", "creation_timestamp": "2026-03-26T20:13:57.137585Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/68478431-d0ba-4639-9e6b-761302660614/export</guid>
      <pubDate>Thu, 26 Mar 2026 20:13:57 +0000</pubDate>
    </item>
    <item>
      <title>6ba3b135-5597-4075-808f-43ce06429f18</title>
      <link>https://vulnerability.circl.lu/sighting/6ba3b135-5597-4075-808f-43ce06429f18/export</link>
      <description>{"uuid": "6ba3b135-5597-4075-808f-43ce06429f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mhztlbwh5s2j", "content": "", "creation_timestamp": "2026-03-27T09:47:10.567785Z"}</description>
      <content:encoded>{"uuid": "6ba3b135-5597-4075-808f-43ce06429f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mhztlbwh5s2j", "content": "", "creation_timestamp": "2026-03-27T09:47:10.567785Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6ba3b135-5597-4075-808f-43ce06429f18/export</guid>
      <pubDate>Fri, 27 Mar 2026 09:47:10 +0000</pubDate>
    </item>
    <item>
      <title>7130bc63-2af6-45aa-9ae4-9b7920c0e528</title>
      <link>https://vulnerability.circl.lu/sighting/7130bc63-2af6-45aa-9ae4-9b7920c0e528/export</link>
      <description>{"uuid": "7130bc63-2af6-45aa-9ae4-9b7920c0e528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://www.cert.se/2026/03/cert-se-veckobrev-v13.html", "content": "", "creation_timestamp": "2026-03-27T14:50:00.000000Z"}</description>
      <content:encoded>{"uuid": "7130bc63-2af6-45aa-9ae4-9b7920c0e528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://www.cert.se/2026/03/cert-se-veckobrev-v13.html", "content": "", "creation_timestamp": "2026-03-27T14:50:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7130bc63-2af6-45aa-9ae4-9b7920c0e528/export</guid>
      <pubDate>Fri, 27 Mar 2026 14:50:00 +0000</pubDate>
    </item>
    <item>
      <title>920c8329-10c3-4bfe-b4df-6811e7b91713</title>
      <link>https://vulnerability.circl.lu/sighting/920c8329-10c3-4bfe-b4df-6811e7b91713/export</link>
      <description>{"uuid": "920c8329-10c3-4bfe-b4df-6811e7b91713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mi3li6yod22k", "content": "", "creation_timestamp": "2026-03-28T02:27:40.783859Z"}</description>
      <content:encoded>{"uuid": "920c8329-10c3-4bfe-b4df-6811e7b91713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mi3li6yod22k", "content": "", "creation_timestamp": "2026-03-28T02:27:40.783859Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/920c8329-10c3-4bfe-b4df-6811e7b91713/export</guid>
      <pubDate>Sat, 28 Mar 2026 02:27:40 +0000</pubDate>
    </item>
    <item>
      <title>82b11a4c-eebb-4fc5-ae02-1f07137b5734</title>
      <link>https://vulnerability.circl.lu/sighting/82b11a4c-eebb-4fc5-ae02-1f07137b5734/export</link>
      <description>{"uuid": "82b11a4c-eebb-4fc5-ae02-1f07137b5734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21992", "type": "seen", "source": "https://gist.github.com/joetustin-cyera/c7d3ab11a87c1c714cd1a843a1a3b91c", "content": "", "creation_timestamp": "2026-03-30T22:31:06.000000Z"}</description>
      <content:encoded>{"uuid": "82b11a4c-eebb-4fc5-ae02-1f07137b5734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21992", "type": "seen", "source": "https://gist.github.com/joetustin-cyera/c7d3ab11a87c1c714cd1a843a1a3b91c", "content": "", "creation_timestamp": "2026-03-30T22:31:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/82b11a4c-eebb-4fc5-ae02-1f07137b5734/export</guid>
      <pubDate>Mon, 30 Mar 2026 22:31:06 +0000</pubDate>
    </item>
    <item>
      <title>f94e99f4-91a5-4169-9a41-29d22e486b1b</title>
      <link>https://vulnerability.circl.lu/sighting/f94e99f4-91a5-4169-9a41-29d22e486b1b/export</link>
      <description>{"uuid": "f94e99f4-91a5-4169-9a41-29d22e486b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://gist.github.com/israelgoracle/8cfacdc462c3f40f6a02c30a4a322aaf", "content": "# \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n# parches.info \u2014 Referencia de parches Oracle CPU/BP para RDAnalyzer\n#\n# Formato:\n#   %PRODUCTO%                    \u2014 bloque de producto (WLS, OSB, SOA, JDK\u2026)\n#   -version-                     \u2014 versi\u00f3n del producto (coincidencia por prefijo)\n#   patch_id; descripci\u00f3n; CPU Release; comments\n#\n# CPU Release: mes y a\u00f1o del Oracle Critical Patch Update (ej: \"January 2026\")\n# El RDAnalyzer compara la fecha del \u00faltimo CPU aqu\u00ed registrado con la fecha\n# del \u00faltimo parche instalado en el sistema. Si el CPU aqu\u00ed es igual o anterior,\n# solicitar\u00e1 revisar la nota KA1182 en MOS para actualizar este fichero.\n#\n# Nota MOS de referencia: KA1182 \u2014 Critical Patch Update (CPU) Patch Advisor\n#   for Oracle Fusion Middleware\n#   https://support.oracle.com/rs?type=doc&amp;amp;id=2806740.2\n#\n# \u2500\u2500 REGLA DE APLICABILIDAD POR TIPO DE DOMINIO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n#\n#   %WLS%  \u2192 dominios WLS standalone (sin SOA ni OSB)\n#            El WLS Stack Patch Bundle cubre WLS + FMW Infrastructure.\n#\n#   %OSB%  \u2192 dominios Oracle Service Bus\n#            El OSB/FMW Control Bundle ya incluye los parches de WLS/FMW;\n#            NO se auditan los parches %WLS% por separado en dominios OSB.\n#\n#   %SOA%  \u2192 dominios Oracle SOA Suite / BPM\n#            El SOA Stack Patch Bundle ya incluye los parches de WLS/FMW;\n#            NO se auditan los parches %WLS% por separado en dominios SOA.\n#\n#   %JDK%  \u2192 aplica siempre, independientemente del tipo de dominio.\n#\n# El tipo de dominio se detecta autom\u00e1ticamente por los m\u00f3dulos RDA cargados\n# (campo rda_modules en topology.json) o por el nombre del dominio WLS.\n# \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\n# \u2500\u2500 WLS standalone (no SOA, no OSB) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Auditar solo cuando el dominio es WLS puro (sin SOA ni OSB desplegados).\n# En dominios OSB o SOA el Stack Patch Bundle correspondiente cubre WLS.\n\n%WLS%\n-12.2.1.4-\n34065178; Oracle Virtual Directory Required FMW Compatibility Patch for JDK 8u331 (or later); April 2022; Aplicar cuando FMW Infrastructure est\u00e1 instalado. No requerido para WLS standalone.\n38820898; WLS STACK PATCH BUNDLE 12.2.1.4.260106; January 2026; Incluye parches de seguridad y correcciones acumulativas para WLS 12.2.1.4.\n\n-14.1.2-\n39168280; Oracle WebLogic Server\nWLS STACK PATCH BUNDLE 14.1.2.0.260405; April 2026; To see what is included, see the README and Note 2764636.1, Introducing the Stack Patch Bundle (SPB) with SPBAT Utility for Oracle WebLogic Server\n\n# \u2500\u2500 Oracle Service Bus (OSB) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# El FMW Control Bundle / OWSM Bundle incluye parches de WLS, FMW Infrastructure\n# y Service Bus. No se requiere aplicar el WLS SPB por separado.\n\n%OSB%\n-12.2.1.4-\n38633461; FMW CONTROL BUNDLE PATCH 12.2.1.4.260120; January 2026; Parche acumulativo para OSB/FMW 12.2.1.4. Incluye correcciones de WLS, FMW Infra y Service Bus.\n38807758; OWSM BUNDLE PATCH 12.2.1.4.251230; January 2026; Oracle Web Services Manager Bundle Patch para OSB 12.2.1.4.\n39023318; Oracle Web Services Manager Fix for Bug 39023318 (Download for 12.2.1.4.251230); March 2026; Aplicar para CVE-2026-21992 / Security Alert KB878741.\n\n-14.1.2-\n38830994; Oracle SOA Suite SOA Stack Patch Bundle 14.1.2.0.260109; January 2026; El SOA/OSB SPB incluye parches de WLS, FMW Infrastructure y SOA/OSB.\n39023318; Oracle Web Services Manager Fix for Bug 39023318; March 2026; Actualizaci\u00f3n Mar 2026: aplicar para CVE-2026-21992.\n\n# \u2500\u2500 Oracle SOA Suite / BPM \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# El SOA Stack Patch Bundle incluye parches de WLS, FMW Infrastructure y SOA.\n# No se requiere aplicar el WLS SPB por separado.\n\n%SOA%\n-12.2.1.4-\n39167223; Oracle WebLogic Server\nWLS STACK PATCH BUNDLE 12.2.1.4.260404; April 2026; To see what is included, see the README and Note 2764636.1, Introducing the Stack Patch Bundle (SPB) with SPBAT Utility for Oracle WebLogic Server.\n\n-14.1.2-\n38830994; Oracle SOA Suite SOA Stack Patch Bundle 14.1.2.0.260109; January 2026; Incluye parches de WLS, FMW Infrastructure y SOA Suite 14.1.2.\n39023318; Oracle Web Services Manager Fix for Bug 39023318; March 2026; Actualizaci\u00f3n Mar 2026: aplicar para CVE-2026-21992.\n\n# \u2500\u2500 JDK (aplica a todos los dominios) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n%JDK%\n-1.8-\n18143322; Java SE 8u481 for Linux/Windows/Solaris; January 2026; Oracle CPU January 2026 para Oracle Java SE 8.\n\n-11-\n# A\u00f1adir parches CPU vigentes para JDK 11 tras consultar nota KA1182\n\n-17-\n33181589; Java SE 17.0.18 or later; April 2026; Oracle Critical Patch Update (CPU) January 2026 para Oracle Java SE 17.\n\n-21-\n35702194; Java SE 21.0.10 or later; April 2026; Oracle Critical Patch Update (CPU) January 2026 para Oracle Java SE 21.\n", "creation_timestamp": "2026-05-28T22:38:37.000000Z"}</description>
      <content:encoded>{"uuid": "f94e99f4-91a5-4169-9a41-29d22e486b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://gist.github.com/israelgoracle/8cfacdc462c3f40f6a02c30a4a322aaf", "content": "# \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n# parches.info \u2014 Referencia de parches Oracle CPU/BP para RDAnalyzer\n#\n# Formato:\n#   %PRODUCTO%                    \u2014 bloque de producto (WLS, OSB, SOA, JDK\u2026)\n#   -version-                     \u2014 versi\u00f3n del producto (coincidencia por prefijo)\n#   patch_id; descripci\u00f3n; CPU Release; comments\n#\n# CPU Release: mes y a\u00f1o del Oracle Critical Patch Update (ej: \"January 2026\")\n# El RDAnalyzer compara la fecha del \u00faltimo CPU aqu\u00ed registrado con la fecha\n# del \u00faltimo parche instalado en el sistema. Si el CPU aqu\u00ed es igual o anterior,\n# solicitar\u00e1 revisar la nota KA1182 en MOS para actualizar este fichero.\n#\n# Nota MOS de referencia: KA1182 \u2014 Critical Patch Update (CPU) Patch Advisor\n#   for Oracle Fusion Middleware\n#   https://support.oracle.com/rs?type=doc&amp;amp;id=2806740.2\n#\n# \u2500\u2500 REGLA DE APLICABILIDAD POR TIPO DE DOMINIO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n#\n#   %WLS%  \u2192 dominios WLS standalone (sin SOA ni OSB)\n#            El WLS Stack Patch Bundle cubre WLS + FMW Infrastructure.\n#\n#   %OSB%  \u2192 dominios Oracle Service Bus\n#            El OSB/FMW Control Bundle ya incluye los parches de WLS/FMW;\n#            NO se auditan los parches %WLS% por separado en dominios OSB.\n#\n#   %SOA%  \u2192 dominios Oracle SOA Suite / BPM\n#            El SOA Stack Patch Bundle ya incluye los parches de WLS/FMW;\n#            NO se auditan los parches %WLS% por separado en dominios SOA.\n#\n#   %JDK%  \u2192 aplica siempre, independientemente del tipo de dominio.\n#\n# El tipo de dominio se detecta autom\u00e1ticamente por los m\u00f3dulos RDA cargados\n# (campo rda_modules en topology.json) o por el nombre del dominio WLS.\n# \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\n# \u2500\u2500 WLS standalone (no SOA, no OSB) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Auditar solo cuando el dominio es WLS puro (sin SOA ni OSB desplegados).\n# En dominios OSB o SOA el Stack Patch Bundle correspondiente cubre WLS.\n\n%WLS%\n-12.2.1.4-\n34065178; Oracle Virtual Directory Required FMW Compatibility Patch for JDK 8u331 (or later); April 2022; Aplicar cuando FMW Infrastructure est\u00e1 instalado. No requerido para WLS standalone.\n38820898; WLS STACK PATCH BUNDLE 12.2.1.4.260106; January 2026; Incluye parches de seguridad y correcciones acumulativas para WLS 12.2.1.4.\n\n-14.1.2-\n39168280; Oracle WebLogic Server\nWLS STACK PATCH BUNDLE 14.1.2.0.260405; April 2026; To see what is included, see the README and Note 2764636.1, Introducing the Stack Patch Bundle (SPB) with SPBAT Utility for Oracle WebLogic Server\n\n# \u2500\u2500 Oracle Service Bus (OSB) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# El FMW Control Bundle / OWSM Bundle incluye parches de WLS, FMW Infrastructure\n# y Service Bus. No se requiere aplicar el WLS SPB por separado.\n\n%OSB%\n-12.2.1.4-\n38633461; FMW CONTROL BUNDLE PATCH 12.2.1.4.260120; January 2026; Parche acumulativo para OSB/FMW 12.2.1.4. Incluye correcciones de WLS, FMW Infra y Service Bus.\n38807758; OWSM BUNDLE PATCH 12.2.1.4.251230; January 2026; Oracle Web Services Manager Bundle Patch para OSB 12.2.1.4.\n39023318; Oracle Web Services Manager Fix for Bug 39023318 (Download for 12.2.1.4.251230); March 2026; Aplicar para CVE-2026-21992 / Security Alert KB878741.\n\n-14.1.2-\n38830994; Oracle SOA Suite SOA Stack Patch Bundle 14.1.2.0.260109; January 2026; El SOA/OSB SPB incluye parches de WLS, FMW Infrastructure y SOA/OSB.\n39023318; Oracle Web Services Manager Fix for Bug 39023318; March 2026; Actualizaci\u00f3n Mar 2026: aplicar para CVE-2026-21992.\n\n# \u2500\u2500 Oracle SOA Suite / BPM \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# El SOA Stack Patch Bundle incluye parches de WLS, FMW Infrastructure y SOA.\n# No se requiere aplicar el WLS SPB por separado.\n\n%SOA%\n-12.2.1.4-\n39167223; Oracle WebLogic Server\nWLS STACK PATCH BUNDLE 12.2.1.4.260404; April 2026; To see what is included, see the README and Note 2764636.1, Introducing the Stack Patch Bundle (SPB) with SPBAT Utility for Oracle WebLogic Server.\n\n-14.1.2-\n38830994; Oracle SOA Suite SOA Stack Patch Bundle 14.1.2.0.260109; January 2026; Incluye parches de WLS, FMW Infrastructure y SOA Suite 14.1.2.\n39023318; Oracle Web Services Manager Fix for Bug 39023318; March 2026; Actualizaci\u00f3n Mar 2026: aplicar para CVE-2026-21992.\n\n# \u2500\u2500 JDK (aplica a todos los dominios) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n%JDK%\n-1.8-\n18143322; Java SE 8u481 for Linux/Windows/Solaris; January 2026; Oracle CPU January 2026 para Oracle Java SE 8.\n\n-11-\n# A\u00f1adir parches CPU vigentes para JDK 11 tras consultar nota KA1182\n\n-17-\n33181589; Java SE 17.0.18 or later; April 2026; Oracle Critical Patch Update (CPU) January 2026 para Oracle Java SE 17.\n\n-21-\n35702194; Java SE 21.0.10 or later; April 2026; Oracle Critical Patch Update (CPU) January 2026 para Oracle Java SE 21.\n", "creation_timestamp": "2026-05-28T22:38:37.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f94e99f4-91a5-4169-9a41-29d22e486b1b/export</guid>
      <pubDate>Thu, 28 May 2026 22:38:37 +0000</pubDate>
    </item>
  </channel>
</rss>
