samael0x4/cve-2026-21962Unauthenticated vulnerability that may allow remote attackers to compromise confidentiality and integrity, potentially leading to full system compromise.
Safe, non-exploitative detection tools for identifying Oracle HTTP Server and WebLogic Proxy Plug-in instances affected by CVE-2026-21962.
This vulnerability may allow a remote, unauthenticated attacker to compromise confidentiality and integrity, potentially leading to full system compromise.
CVE-2026-21962.yamlPassive detection using HTTP response header fingerprinting.
nuclei -l targets.txt -t CVE-2026-21962.yaml
An operator-grade, safe validation PoC for identifying Oracle HTTP Server instances affected by CVE-2026-21962.
This script performs passive detection only and does not exploit the vulnerability.
Multi-threaded scanning Colorized output (VULNERABLE / NOT VULNERABLE / UNREACHABLE) JSON & CSV export Bug bounty & enterprise-ready No exploitation, detection only
Scan a single target
python3 CVE-2026-21962.py -t example.com
Scan multiple targets from a file
python3 CVE-2026-21962.py -iL targets.txt
Multi-threaded scan with JSON output
python3 CVE-2026-21962.py -iL targets.txt --threads 20 -oJ results.json
Multi-threaded scan with CSV output
python3 CVE-2026-21962.py -iL targets.txt --threads 20 -oC results.csv
This project contains only detection and does not include exploit code.
Please use responsibly and only with permission.