CISA has mandated government agencies to patch a high-severity Oracle WebLogic Server vulnerability that was originally fixed two years ago but is now being actively exploited in attacks. The vulnerability affects Oracle WebLogic Server systems and poses significant security risks to government infrastructure. Despite being patched years ago, many systems remain vulnerable due to incomplete patch deployment. The active exploitation of this older vulnerability highlights the ongoing risks from unpatched systems. Government agencies have been given a deadline to remediate this security flaw.