Mitel 0-day, 5-year-old Oracle RCE bug under active exploit

Cybercriminals are actively exploiting two Mitel MiCollab path-traversal vulnerabilities (CVE-2024-41713 — critical and patched; CVE-2024-55550 — low severity, currently mitigated but not fully patched) and a long-exploited Oracle WebLogic RCE (CVE-2020-2883 — critical, previously patched but abused in the wild). CISA has added all three to its Known Exploited Vulnerabilities Catalog; organizations using MiCollab or affected WebLogic versions should apply available updates immediately to prevent data leakage, system compromise, and potential eavesdropping or remote code execution.