9 casos · pág. 1/1
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-14 based on evidence of active exploitation: CVE-2026-76461, a SQL injection vulnerability in Cisco Secure Email Gateway. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the f…
CISA added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-22, citing evidence of active exploitation. The entries affect Check Point (two flaws in multiple products), Arista VeloCloud Orchestrator and F5 BIG-IP APM. The alert gives no exploitation details, threat actor attribution or IOCs. CISA notes …
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-21 based on evidence of active exploitation: CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 Series Switches. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-25 based on evidence of active exploitation: CVE-2026-87902, a remote file inclusion flaw in WordPress Core. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the federal enterp…
CISA issued an alert on exploitation of critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, noting confirmed malicious activity involving at least some of them. The alert references Citrix bulletins for CVE-2026-107406, CVE-2026-88779 and CVE-2026-88771 through CVE-2026-88778. Because NetScaler updates can be …
CISA warns that threat actors are exploiting CVE-2026-104935, a zero-day authentication bypass in Ivanti Connect Secure that allows remote, unauthenticated execution of arbitrary commands. The activity is being used for credential theft and data exfiltration. CISA added the CVE to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. …
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-04, citing evidence of active exploitation: CVE-2026-88779, an improper restriction of operations within the bounds of a memory buffer flaw in Citrix NetScaler. CISA describes this vulnerability type as a frequent attack vector for malicious cyber…
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on the basis of evidence of active exploitation: CVE-2025-61624, a path traversal flaw in multiple Fortinet products, and CVE-2026-102764, an authentication bypass by spoofing in BeyondTrust Remote Support. CISA describes these vulnerability types as a fre…
The FBI, CISA, NSA, EPA, DOE, CNMF and Treasury warn of ongoing exploitation of internet-exposed PLCs by an Iranian-affiliated APT group, with activity observed since at least March 2026. Targets are Rockwell Automation/Allen-Bradley, Schneider Electric and Siemens PLCs in the Government Services and Facilities, Water and Wastewater Syste…
