33 casos · pág. 2/2
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-18 based on evidence of active exploitation: CVE-2025-39682, an Improper Check for Unusual or Exceptional Conditions flaw in the Linux Kernel. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a sign…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-25 based on evidence of active exploitation: CVE-2026-87902, a remote file inclusion flaw in WordPress Core. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the federal enterp…
CISA added two Citrix NetScaler vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-88771, an improper input validation flaw, and CVE-2026-88772, a memory buffer bounds restriction flaw. CISA describes these vulnerability types as frequent attack vectors for malicious cyb…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-01, citing evidence of active exploitation: CVE-2026-104286, a path traversal flaw in Fortinet FortiMail. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the federal enterpris…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-29, citing evidence of active exploitation: CVE-2026-86950, an out-of-bounds write flaw affecting multiple Apple products. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-30, citing evidence of active exploitation: CVE-2026-76504, a hex encoding vulnerability in Cisco Catalyst SD-WAN Manager. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-04, citing evidence of active exploitation: CVE-2026-88779, an improper restriction of operations within the bounds of a memory buffer flaw in Citrix NetScaler. CISA describes this vulnerability type as a frequent attack vector for malicious cyber…
CISA added two Zammad GmbH Zammad vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-102489, a session fixation flaw, and CVE-2026-102490, an improper privilege management flaw. CISA describes these vulnerability types as frequent attack vectors for malicious cyber actor…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-15, citing evidence of active exploitation: CVE-2026-21589, an Atlassian Multiple Products flaw in which files or directories are accessible to external parties. CISA describes this vulnerability type as a frequent attack vector for malicious cybe…
CISA announced the addition of four vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-14. The excerpt available does not name the CVEs, affected vendors or products, exploitation details, threat actor attribution or IOCs. The text focuses on Binding Operational Directive (BOD) 26-04: Prioritizing Security Upd…
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on the basis of evidence of active exploitation: CVE-2025-61624, a path traversal flaw in multiple Fortinet products, and CVE-2026-102764, an authentication bypass by spoofing in BeyondTrust Remote Support. CISA describes these vulnerability types as a fre…
CISA issued an alert on exploitation of critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, noting confirmed malicious activity involving at least some of them. The alert references Citrix bulletins for CVE-2026-107406, CVE-2026-88779 and CVE-2026-88771 through CVE-2026-88778. Because NetScaler updates can be …
Arista Networks released security updates for CVE-2026-114625, a critical (CVSS 9.9) zero-day SQL injection in VeloCloud Orchestrator (VCO) that is being actively exploited. Any authenticated user, even with the lowest built-in Enterprise Read Only tenant role, who can reach the VCO web interface can escalate to operator privileges and ma…
