Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation

Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation Ravie LakshmananJun 02, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability, CVE-2024-21182 (CVSS score: 7.5), allows an unauthenticated attacker with network access to take control of susceptible servers. It was patched by Oracle in July 2024. "Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server," CISA said. "Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data." There are currently no public reports about how the vulnerability is being exploited in the wild. That said, prior flaws in the software have been repeatedly weaponized by various threat actors to enlist them into botnets, mine cryptocurrency, and deploy ransomware. Earlier this March, CloudSEK also disclosed that another maximum-severity security flaw in WebLogic (CVE-2026-21962, CVSS score: 10.0) witnessed automated exploitation attempts shortly after exploit code became publicly available. In light of active exploitation of the flaw, Federal Civilian Executive Branch (FCEB) agencies are recommended to apply the necessary fixes by June 4, 2026, to secure their networks. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. SHARE     Tweet Share Share SHARE  CISA, cybersecurity, network security, Oracle WebLogic, Patch Management, Threat Intelligence, Vulnerability Management ⚡ Top Stories This Week Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems Developer Workstations Are Now Part of the Software Supply Chain ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories 9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software The New Phishing Click: How OAuth Consent Bypasses MFA Microsoft Warns of Two Actively Exploited Defender Vulnerabilities Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows Load More ▼ ⭐ Featured Resources [Guide] Get Key Identity Security Insights From 2026 Snapshot [Guide] Learn to Detect AI Typosquatting Risks in Your Domain Discover How to Navigate the Era of Constant Cyber Exposure Claim ANY.RUN Anniversary Offer for Faster Malware Analysis