Original link: CVE-2025-21535 (CVSS 9.8): Vulnerability in Oracle WebLogic Server Could Lead to Remote Code Execution / SecurityOnline.
I don't think many route remote EJB calls from insecure network zone to application servers today, but RCE is always critical.