Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-09 12:21 UTC
Importiert: 2026-10-15 11:45 UTC
CVSS: 10.0
Quelle-ID: thn_global
uid_hash: 3fcc80fa1a6d561e539b3bf3b7a5c0eb512d093f9d01fe550da960ffa221d690

The Hacker News

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon.

The vulnerabilities in question are listed below -

CVE-2015-3306 (CVSS score: 10.0) - An improper access control vulnerability in ProFTPD that could allow

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2015-3306	CRITICAL	10	CRITICAL	10			2015-05-18

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste