Sec Feed Reader

CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Quellen-ID (source_id): cisa_kev
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: cisa_kev_json
Sprache: de
Zielgruppe: —
Tags: cisa, kev
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa"	-

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 4 von 36

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2026-05-27 00:00	CVE-2026-45321 — TanStack Unspecified Vulnerability	CVE-2026-45321		CRITICAL
2026-05-27 00:00	CVE-2026-8398 — Daemon Tools Lite Embedded Malicious Code Vulnerability	CVE-2026-8398		CRITICAL
2026-05-26 00:00	CVE-2026-48172 — LiteSpeed cPanel Plugin Privilege Escalation Vulnerability	CVE-2026-48172		CRITICAL
2026-05-22 00:00	CVE-2026-9082 — Drupal Core SQL Injection Vulnerability	CVE-2026-9082		MEDIUM
2026-05-21 00:00	CVE-2025-34291 — Langflow Origin Validation Error Vulnerability	CVE-2025-34291		CRITICAL
2026-05-21 00:00	CVE-2026-34926 — Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability	CVE-2026-34926		MEDIUM
2026-05-20 00:00	CVE-2010-0249 — Microsoft Internet Explorer Use-After-Free Vulnerability	CVE-2010-0249		HIGH
2026-05-20 00:00	CVE-2008-4250 — Microsoft Windows Buffer Overflow Vulnerability	CVE-2008-4250		CRITICAL
2026-05-20 00:00	CVE-2009-3459 — Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability	CVE-2009-3459		HIGH
2026-05-20 00:00	CVE-2009-1537 — Microsoft DirectX NULL Byte Overwrite Vulnerability	CVE-2009-1537		HIGH
2026-05-20 00:00	CVE-2026-45498 — Microsoft Defender Denial of Service Vulnerability	CVE-2026-45498		MEDIUM
2026-05-20 00:00	CVE-2026-41091 — Microsoft Defender Link Following Vulnerability	CVE-2026-41091		HIGH
2026-05-20 00:00	CVE-2010-0806 — Microsoft Internet Explorer Use-After-Free Vulnerability	CVE-2010-0806		HIGH
2026-05-15 00:00	CVE-2026-42897 — Microsoft Exchange Server Cross-Site Scripting Vulnerability	CVE-2026-42897		HIGH
2026-05-14 00:00	CVE-2026-20182 — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	CVE-2026-20182		CRITICAL
2026-05-08 00:00	CVE-2026-42208 — BerriAI LiteLLM SQL Injection Vulnerability	CVE-2026-42208		CRITICAL
2026-05-07 00:00	CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability	CVE-2026-6973	0.84732	HIGH
2026-05-06 00:00	CVE-2026-0300 — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability	CVE-2026-0300		CRITICAL
2026-05-01 00:00	CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability	CVE-2026-31431		HIGH
2026-04-30 00:00	CVE-2026-41940 — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability	CVE-2026-41940	0.99921	CRITICAL
2026-04-28 00:00	CVE-2024-1708 — ConnectWise ScreenConnect Path Traversal Vulnerability	CVE-2024-1708		HIGH
2026-04-28 00:00	CVE-2026-32202 — Microsoft Windows Protection Mechanism Failure Vulnerability	CVE-2026-32202		MEDIUM
2026-04-24 00:00	CVE-2024-7399 — Samsung MagicINFO 9 Server Path Traversal Vulnerability	CVE-2024-7399		HIGH
2026-04-24 00:00	CVE-2025-29635 — D-Link DIR-823X Command Injection Vulnerability	CVE-2025-29635		HIGH
2026-04-24 00:00	CVE-2024-57726 — SimpleHelp Missing Authorization Vulnerability	CVE-2024-57726		CRITICAL
2026-04-24 00:00	CVE-2024-57728 — SimpleHelp Path Traversal Vulnerability	CVE-2024-57728		HIGH
2026-04-23 00:00	CVE-2026-39987 — Marimo Remote Code Execution Vulnerability	CVE-2026-39987		CRITICAL
2026-04-22 00:00	CVE-2026-33825 — Microsoft Defender Insufficient Granularity of Access Control Vulnerability	CVE-2026-33825		HIGH
2026-04-20 00:00	CVE-2025-32975 — Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability	CVE-2025-32975 CVE-2025-32976 CVE-2025-32977 +1		CRITICAL
2026-04-20 00:00	CVE-2026-20128 — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability	CVE-2026-20128		HIGH
2026-04-20 00:00	CVE-2023-27351 — PaperCut NG/MF Improper Authentication Vulnerability	CVE-2023-27351		HIGH
2026-04-20 00:00	CVE-2025-2749 — Kentico Xperience Path Traversal Vulnerability	CVE-2025-2749		HIGH
2026-04-20 00:00	CVE-2026-20133 — Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability	CVE-2026-20133		MEDIUM
2026-04-20 00:00	CVE-2024-27199 — JetBrains TeamCity Relative Path Traversal Vulnerability	CVE-2024-27198 CVE-2024-27199		CRITICAL
2026-04-20 00:00	CVE-2025-48700 — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability	CVE-2025-48700		MEDIUM
2026-04-20 00:00	CVE-2026-20122 — Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability	CVE-2026-20122		MEDIUM
2026-04-16 00:00	CVE-2026-34197 — Apache ActiveMQ Improper Input Validation Vulnerability	CVE-2026-34197		HIGH
2026-04-14 00:00	CVE-2026-32201 — Microsoft SharePoint Server Improper Input Validation Vulnerability	CVE-2026-32201		MEDIUM
2026-04-14 00:00	CVE-2009-0238 — Microsoft Office Remote Code Execution	CVE-2009-0238		HIGH
2026-04-13 00:00	CVE-2012-1854 — Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability	CVE-2012-1854		HIGH
2026-04-13 00:00	CVE-2026-34621 — Adobe Acrobat and Reader Prototype Pollution Vulnerability	CVE-2026-34621		HIGH
2026-04-13 00:00	CVE-2025-60710 — Microsoft Windows Link Following Vulnerability	CVE-2025-60710		HIGH
2026-04-13 00:00	CVE-2020-9715 — Adobe Acrobat Use-After-Free Vulnerability	CVE-2020-9715		HIGH
2026-04-13 00:00	CVE-2023-36424 — Microsoft Windows Out-of-Bounds Read Vulnerability	CVE-2023-36424		HIGH
2026-04-13 00:00	CVE-2026-21643 — Fortinet FortiClient EMS SQL Injection Vulnerability	CVE-2026-21643		CRITICAL
2026-04-13 00:00	CVE-2023-21529 — Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability	CVE-2023-21529		HIGH
2026-04-08 00:00	CVE-2026-1340 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability	CVE-2026-1281 CVE-2026-1340	0.99925	CRITICAL
2026-04-06 00:00	CVE-2026-35616 — Fortinet FortiClient EMS Improper Access Control Vulnerability	CVE-2026-35616		CRITICAL
2026-04-02 00:00	CVE-2026-3502 — TrueConf Client Download of Code Without Integrity Check Vulnerability	CVE-2026-3502		HIGH
2026-04-01 00:00	CVE-2026-5281 — Google Dawn Use-After-Free Vulnerability	CVE-2026-5281		HIGH

Alle Quellen