Sec Feed Reader

CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Quellen-ID (source_id): cisa_kev
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: cisa_kev_json
Sprache: de
Zielgruppe: —
Tags: cisa, kev
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa"	-

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 3 von 36

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2026-07-27 00:00	CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability	CVE-2025-68686		MEDIUM
2026-07-27 00:00	CVE-2026-16812 — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability	CVE-2026-16812		CRITICAL
2026-07-22 00:00	CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability	CVE-2026-16232		CRITICAL
2026-07-22 00:00	CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability	CVE-2026-50522		CRITICAL
2026-07-21 00:00	CVE-2021-27137 — DD-WRT Stack-Based Buffer Overflow Vulnerability	CVE-2021-27137		HIGH
2026-07-21 00:00	CVE-2026-0770 — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability	CVE-2026-0770		CRITICAL
2026-07-21 00:00	CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability	CVE-2026-60137 CVE-2026-63030	0.95769	CRITICAL
2026-07-21 00:00	CVE-2026-60137 — WordPress Core SQL Injection Vulnerability	CVE-2026-60137 CVE-2026-63030	0.95769	CRITICAL
2026-07-16 00:00	CVE-2026-25089 — Fortinet FortiSandbox OS Command Injection Vulnerability	CVE-2026-25089		CRITICAL
2026-07-16 00:00	CVE-2026-58644 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability	CVE-2026-58644		CRITICAL
2026-07-16 00:00	CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection Vulnerability	CVE-2026-39808		CRITICAL
2026-07-15 00:00	CVE-2023-4346 — KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability	CVE-2023-4346		HIGH
2026-07-15 00:00	CVE-2026-46817 — Oracle E-Business Suite Improper Privilege Management Vulnerability	CVE-2026-46817		CRITICAL
2026-07-14 00:00	CVE-2026-15410 — SonicWall SMA1000 Appliances Code Injection Vulnerability	CVE-2026-15410		HIGH
2026-07-14 00:00	CVE-2026-15409 — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability	CVE-2026-15409	0.93945	CRITICAL
2026-07-14 00:00	CVE-2026-56164 — Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability	CVE-2026-56164		MEDIUM
2026-07-14 00:00	CVE-2026-56155 — Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability	CVE-2026-56155		HIGH
2026-07-13 00:00	CVE-2008-4128 — Cisco IOS Cross-Site Request Forgery Vulnerability	CVE-2008-4128		MEDIUM
2026-07-10 00:00	CVE-2026-48939 — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability	CVE-2026-48939		CRITICAL
2026-07-10 00:00	CVE-2026-56291 — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability	CVE-2026-56291		CRITICAL
2026-07-07 00:00	CVE-2026-48908 — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability	CVE-2026-48908		CRITICAL
2026-07-07 00:00	CVE-2026-48282 — Adobe ColdFusion Path Traversal Vulnerability	CVE-2026-48282		CRITICAL
2026-07-07 00:00	CVE-2026-55255 — Langflow Authorization Bypass Through User-Controlled Key Vulnerability	CVE-2026-55255		CRITICAL
2026-07-07 00:00	CVE-2026-56290 — Joomlack Page Builder Improper Access Control Vulnerability	CVE-2026-56290		CRITICAL
2026-07-01 00:00	CVE-2026-45659 — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability	CVE-2026-45659		HIGH
2026-06-29 00:00	CVE-2026-48558 — SimpleHelp Authentication Bypass Vulnerability	CVE-2026-48558		CRITICAL
2026-06-25 00:00	CVE-2026-20230 — Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability	CVE-2026-20230		HIGH
2026-06-25 00:00	CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability	CVE-2026-12569		CRITICAL
2026-06-23 00:00	CVE-2025-67038 — Lantronix EDS5000 Code Injection Vulnerability	CVE-2025-67038		CRITICAL
2026-06-23 00:00	CVE-2026-34910 — Ubiquiti UniFi OS Improper Input Validation Vulnerability	CVE-2026-34910		CRITICAL
2026-06-23 00:00	CVE-2026-34909 — Ubiquiti UniFi OS Path Traversal Vulnerability	CVE-2026-34909		CRITICAL
2026-06-23 00:00	CVE-2026-34908 — Ubiquiti UniFi OS Improper Access Control Vulnerability	CVE-2026-34908		CRITICAL
2026-06-18 00:00	CVE-2026-20253 — Splunk Enterprise Missing Authentication for Critical Function Vulnerability	CVE-2026-20253		CRITICAL
2026-06-16 00:00	CVE-2026-48907 — Widget Factory Joomla Content Editor Improper Access Control Vulnerability	CVE-2026-48907		CRITICAL
2026-06-15 00:00	CVE-2026-54420 — LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability	CVE-2026-54420		HIGH
2026-06-15 00:00	CVE-2026-20262 — Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability	CVE-2026-20262		MEDIUM
2026-06-12 00:00	CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability	CVE-2026-35273		CRITICAL
2026-06-11 00:00	CVE-2026-10520 — Ivanti Sentry OS Command Injection Vulnerability	CVE-2026-10520 CVE-2026-10523		CRITICAL
2026-06-09 00:00	CVE-2026-20245 — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability	CVE-2026-20245		HIGH
2026-06-09 00:00	CVE-2026-7473 — Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability	CVE-2026-7473		MEDIUM
2026-06-09 00:00	CVE-2026-11645 — Google Chromium V8 Out-of-Bounds Read and Write Vulnerability	CVE-2026-11645		HIGH
2026-06-08 00:00	CVE-2026-42271 — BerriAI LiteLLM Command Injection Vulnerability	CVE-2026-42271		HIGH
2026-06-08 00:00	CVE-2026-50751 — Check Point Security Gateway Improper Authentication Vulnerability	CVE-2026-50751	0.99718	CRITICAL
2026-06-05 00:00	CVE-2026-28318 — SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability	CVE-2026-28318		HIGH
2026-06-03 00:00	CVE-2026-45247 — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability	CVE-2026-45247		CRITICAL
2026-06-02 00:00	CVE-2025-48595 — Android Framework Integer Overflow Vulnerability	CVE-2025-48595		HIGH
2026-06-02 00:00	CVE-2022-0492 — Linux Kernel Improper Authentication Vulnerability	CVE-2022-0492		HIGH
2026-06-01 00:00	CVE-2024-21182 — Oracle WebLogic Server Unspecified Vulnerability	CVE-2024-21182		HIGH
2026-05-29 00:00	CVE-2026-0257 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability	CVE-2026-0257		MEDIUM
2026-05-27 00:00	CVE-2026-48027 — Nx Console Embedded Malicious Code Vulnerability	CVE-2026-48027		CRITICAL

Alle Quellen