CISA Warns of Two-Year

Cybersecuritynews •Abinaya • June 2, 2026

CISA has issued a fresh warning highlighting active exploitation of a critical Oracle WebLogic Server vulnerability, tracked as CVE-2024-21182, adding it to its Known Exploited Vulnerabilities (KEV) catalog on June 1, 2026. The alert underscores the increasing risk posed by exposed enterprise middleware systems, particularly those accessible over network protocols such as T3 and IIOP. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Active Exploitation of Oracle WebLogic Vulnerability CVE-2024-21182 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a two-year-old vulnerability in Oracle WebLogic Server, tracked as CVE-2024-21182. This flaw, which affects versions 12.2.1.4.0 and 14.1.1.0.0, allows unauthenticated attackers to remotely compromise servers using T3 and IIOP protocols. CISA has added this vulnerability to its Known Exploited Vulnerabilities catalog and mandated federal agencies to patch their systems by June 4, 2026. Currently, over 1,592 Oracle WebLogic servers are identified as exposed and vulnerable. Successful exploitation can lead to unauthorized access to critical data or complete control over the server. CISA has previously flagged numerous Oracle vulnerabilities, highlighting the ongoing risk posed by such flaws. Organizations are urged to apply patches immediately to mitigate potential attacks. 17 sources 73

Extracted Entities

CVEs (1)

CVE-2024-21182

Platforms (1)

Oracle WebLogic Server