87 casos · pág. 1/5
CISA added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Four affect Plex Media Server: CVE-2026-96652 and CVE-2026-96655 (SSRF), CVE-2026-96654 (improper neutralization of encoded URI schemes) and CVE-2026-96656 (external control of file name or path). The other two are…
Wiz announced that its Wiz AI Agents are now available in Wiz for U.S. Government (Wiz for Gov), its FedRAMP High authorized environment. Wiz describes this as the first AI-Application Protection Platform (AI-APP) for U.S. public sector organizations that protect highly sensitive, national security and mission-critical data. This is vendo…
CISA added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Two affect JFrog Artifactory: CVE-2026-42016 (incorrect authorization) and CVE-2026-42018 (improper authentication). The third is CVE-2026-84869 in ConnectWise ScreenConnect (improper privilege management and mis…
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-76460, an incorrect use of privileged APIs flaw in Cisco Identity Services Engine, and CVE-2026-87886, an incorrect default permissions flaw in Acronis Backup. CISA describes these vulnerability types as a…
CISA added two Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2025-39964, a race condition flaw, and CVE-2026-53266, an out-of-bounds write flaw. CISA describes these vulnerability types as a frequent attack vector for malicious cyber actors and a significant…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-16 based on evidence of active exploitation: CVE-2026-58704, an improper authorization vulnerability in Google Pixel. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the feder…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-14 based on evidence of active exploitation: CVE-2026-76461, a SQL injection vulnerability in Cisco Secure Email Gateway. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the f…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-11 based on evidence of active exploitation: CVE-2026-85706, a path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors…
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-65660, a code injection flaw in Microsoft SharePoint, and CVE-2026-67279, an improper enforcement of behavioral workflow flaw in MikroTik RouterOS. CISA describes these vulnerability types as a frequent at…
CISA added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-22, citing evidence of active exploitation. The entries affect Check Point (two flaws in multiple products), Arista VeloCloud Orchestrator and F5 BIG-IP APM. The alert gives no exploitation details, threat actor attribution or IOCs. CISA notes …
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-5430, a path traversal flaw in multiple WSO2 products, and CVE-2026-71362, an incorrect authorization flaw in Adobe Commerce and Magento. CISA describes these vulnerability types as a frequent attack vecto…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-21 based on evidence of active exploitation: CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 Series Switches. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-18 based on evidence of active exploitation: CVE-2025-39682, an Improper Check for Unusual or Exceptional Conditions flaw in the Linux Kernel. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a sign…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-25 based on evidence of active exploitation: CVE-2026-87902, a remote file inclusion flaw in WordPress Core. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the federal enterp…
CISA added two Citrix NetScaler vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-88771, an improper input validation flaw, and CVE-2026-88772, a memory buffer bounds restriction flaw. CISA describes these vulnerability types as frequent attack vectors for malicious cyb…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-01, citing evidence of active exploitation: CVE-2026-104286, a path traversal flaw in Fortinet FortiMail. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the federal enterpris…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-29, citing evidence of active exploitation: CVE-2026-86950, an out-of-bounds write flaw affecting multiple Apple products. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-30, citing evidence of active exploitation: CVE-2026-76504, a hex encoding vulnerability in Cisco Catalyst SD-WAN Manager. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-96951, a command injection flaw in Microsoft Windows, and CVE-2026-104935, an authentication bypass by spoofing in Ivanti Connect Secure. CISA describes these vulnerability types as a frequent attack vecto…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-04, citing evidence of active exploitation: CVE-2026-88779, an improper restriction of operations within the bounds of a memory buffer flaw in Citrix NetScaler. CISA describes this vulnerability type as a frequent attack vector for malicious cyber…
