CISA flags Oracle WebLogic CVE-2024-21182 as actively exploited

ON June 1, 2026, CISA announced the addition of a new vulnerability, CVE-2024-21182, related to Oracle WebLogic Server, to its Known Exploited Vulnerabilities Catalog. This vulnerability has been identified as actively exploited and poses significant risks to federal enterprises. The addition aligns with Binding Operational Directive 22-01, which mandates Federal Civilian Executive Branch agencies to address such vulnerabilities to safeguard against cyber threats. CISA encourages all organizations, not just federal agencies, to prioritize remediation of these vulnerabilities to mitigate cyberattack risks.