Security News Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager TheHackerNews Daniel Bender 21 Mar 2026 Oracle fixes CVE-2026-21992 (CVSS 9.8) flaw enabling unauthenticated RCE via HTTP, risking full system compromise.