Most recent of the newly added vulnerabilities is a critical remote command execution issue in Apache HugeGraph-Server, tracked as CVE-2024-27348, which could be leveraged to facilitate sandbox restriction evasion. Also part of the CISA advisory are a pair of critical RCEs in Oracle JDeveloper and WebLogic Server, tracked as CVE-2022-21445 and CVE-2020-14644, respectively, both of which could be exploited to allow software takeovers.

Source: SC Magazine