CYBERSIXT Signal Over Noise
www.cisa.gov 6/1/2026, 6:41:25 PM · external

CISA flags Oracle WebLogic CVE-2024-21182 as actively exploited

CyberSIXT Evidence Panel
Primary Source cve.org
CVE Intel
CVE-2024-21182 - NVD Not in KEV 7.5 HIGH
CISA KEV Not in KEV
Patch Patch Available

ON June 1, 2026, CISA announced the addition of a new vulnerability, CVE-2024-21182, related to Oracle WebLogic Server, to its Known Exploited Vulnerabilities Catalog. This vulnerability has been identified as actively exploited and poses significant risks to federal enterprises. The addition aligns with Binding Operational Directive 22-01, which mandates Federal Civilian Executive Branch agencies to address such vulnerabilities to safeguard against cyber threats. CISA encourages all organizations, not just federal agencies, to prioritize remediation of these vulnerabilities to mitigate cyberattack risks.

View Primary Source Via www.cisa.gov

Article by CyberSIXT