Oracle has released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability in Identity Manager and Web Services Manager tracked as CVE-2026-21992.
A 2.85% pricing mismatch in wstETH triggered about $27 million in liquidations on Aave, revealing how oracle configurations and risk parameters can affect DeFi lending markets.