Oracle Releases Emergency Patch for Critical Identity Manager Vulnerability

2026-03-24

Oracle has released an emergency patch for a critical 9.8-rated vulnerability (CVE-2026-21992) that allows unauthenticated remote code execution. This flaw enables attackers to bypass security and take full control of Oracle Identity Manager and Web Services Manager.