Oracle releases emergency patch for critical identity management vulnerability

Oracle releases emergency patch for critical identity management vulnerability

By LinkedInEditors
Publication Date: 2026-03-22 10:00:00

Oracle Corporation has released an urgent out-of-band security update to address a critical vulnerability that could allow attackers to take full control of affected systems without authentication, raising significant concerns across enterprise IT environments worldwide.

A serious threat to corporate identity systems

The vulnerability, tracked as CVE-2026-21992affects two widely used enterprise products: Oracle Identity Manager and Oracle Web Services Manager. Both platforms play a central role in securing enterprise infrastructure – taking care of identity management, authentication workflows, and policy enforcement across applications and services.

Accordingly Oracle Consultingthe mistake is particularly dangerous because it enables Unauthenticated remote code execution…