CISA Adds CVSS 10.0 Oracle WebLogic Flaw to KEV, Exploited Since February 2026

·17 views

CISA added CVE-2026-21962, a maximum-severity improper access control vulnerability in Oracle HTTP Server and the WebLogic Server Proxy Plug-in, to its Known Exploited Vulnerabilities catalog on August 24, 2026. The flaw allows an unauthenticated attacker with HTTP network access to read, create, delete, or modify critical data across any system reachable through the proxy tier, requiring no credentials or user interaction. Oracle had already issued a patch in its January 2026 Critical Patch Update, meaning affected organizations had seven months to remediate before active exploitation was officially confirmed. Security firms GreyNoise and CloudSEK documented exploitation attempts as early as February and March 2026, with attackers simultaneously probing several older WebLogic vulnerabilities alongside the new flaw. Federal civilian agencies were given until August 27, 2026 — a three-day window — to apply fixes under Binding Operational Directive 26-04.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Coastline Index Launches Machine-Readable GTA 6 Data APIs for AI Tools

Developers have launched Coastline Index, a structured reference platform for GTA VI data designed to be consumed by large language models and AI tools. The project restricts its dataset strictly to Rockstar-confirmed information, excluding unverified rumors or fan speculation. It implements an llms.txt file to direct AI crawlers toward high-quality pages and APIs. Developers can query clean, structured data via API instead of scraping HTML or unreliable fan forums. The platform positions itself as a reliable data layer for anyone building game-aware AI applications around GTA 6.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Some Settlement Systems Can Skip the Outbox Pattern for Idempotency

A software engineer recently detailed a deliberate architectural choice to use a two-layer idempotency model instead of the widely recommended transactional outbox pattern in a settlement system. The outbox pattern ensures reliable event publishing by atomically writing events to a database table alongside business data, with a separate process relaying them to a message broker like Kafka. While effective, the pattern adds operational overhead including a poller or CDC pipeline, dedicated monitoring, and additional failure-handling responsibilities. For settlement systems operating on windows measured in minutes, the author argued that the narrow failure gap between a database commit and broker acknowledgment is both rare and recoverable after the fact. Instead of preventing the gap at the producer, the design absorbs it at the consumer side, accepting the dual-write risk in exchange for a simpler operational footprint.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Only 39% of Companies Report Real Financial Gains from AI, Stanford Index Finds

Despite widespread claims of AI adoption, only 39% of organizations can demonstrate actual profit or cost savings from their AI initiatives, according to the Stanford AI Index 2026. Many companies treat deployment milestones as victories while neglecting to measure concrete business outcomes such as reduced costs, lower churn, or increased revenue. Gartner projects that over 40% of agentic AI projects will be abandoned within the next year due to unclear returns and escalating operational costs. A common pitfall is that AI teams track technical metrics like model accuracy or inference speed rather than tying results directly to financial line items. Experts argue that realizing genuine value from AI requires close collaboration between engineering, product, and finance teams to define and monitor measurable business outcomes from the outset.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

PromptClip-Skill lets users filter home videos using natural-language prompts

A developer has released PromptClip-Skill, a free, open-source tool that uses natural-language prompts to identify and shortlist meaningful moments from casual, unedited video footage. The tool runs locally via Codex and allows users to describe desired content, mood, and exclusions — such as removing shaky or repeated footage — before any editing begins. Unlike one-click video creation tools, it produces an inspectable edit decision list with timestamps, giving users transparency and control over what gets kept. The skill works non-destructively, leaving original files untouched, and supports export through FFmpeg or other editing software. While built around family videos, the developer notes it can be applied to travel, sports, interviews, or any footage where useful moments are buried among low-quality clips.

0 comments Read more at DEV Community