Sec Feed Reader

CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Quellen-ID (source_id): cisa_kev
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: cisa_kev_json
Sprache: de
Zielgruppe: —
Tags: cisa, kev
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa"	-

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 6 von 36

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2026-02-03 00:00	CVE-2025-64328 — Sangoma FreePBX OS Command Injection Vulnerability	CVE-2025-64328		HIGH
2026-02-03 00:00	CVE-2025-40551 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability	CVE-2025-40551		CRITICAL
2026-02-03 00:00	CVE-2021-39935 — GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability	CVE-2021-39935		MEDIUM
2026-02-03 00:00	CVE-2019-19006 — Sangoma FreePBX Improper Authentication Vulnerability	CVE-2019-19006		CRITICAL
2026-01-29 00:00	CVE-2026-1281 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability	CVE-2026-1281 CVE-2026-1340	0.99925	CRITICAL
2026-01-27 00:00	CVE-2026-24858 — Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability	CVE-2026-24858	0.99729	CRITICAL
2026-01-26 00:00	CVE-2026-21509 — Microsoft Office Security Feature Bypass Vulnerability	CVE-2026-21509		HIGH
2026-01-26 00:00	CVE-2026-23760 — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability	CVE-2026-23760		CRITICAL
2026-01-26 00:00	CVE-2026-24061 — GNU InetUtils Argument Injection Vulnerability	CVE-2026-24061		CRITICAL
2026-01-26 00:00	CVE-2025-52691 — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability	CVE-2025-52691		CRITICAL
2026-01-26 00:00	CVE-2018-14634 — Linux Kernel Integer Overflow Vulnerability	CVE-2018-14634		HIGH
2026-01-23 00:00	CVE-2024-37079 — Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability	CVE-2024-37079		CRITICAL
2026-01-22 00:00	CVE-2025-31125 — Vite Vitejs Improper Access Control Vulnerability	CVE-2025-31125		MEDIUM
2026-01-22 00:00	CVE-2025-68645 — Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability	CVE-2025-68645		HIGH
2026-01-22 00:00	CVE-2025-54313 — Prettier eslint-config-prettier Embedded Malicious Code Vulnerability	CVE-2025-54313		HIGH
2026-01-22 00:00	CVE-2025-34026 — Versa Concerto Improper Authentication Vulnerability	CVE-2025-34026		CRITICAL
2026-01-21 00:00	CVE-2026-20045 — Cisco Unified Communications Products Code Injection Vulnerability	CVE-2026-20045		HIGH
2026-01-13 00:00	CVE-2026-20805 — Microsoft Windows Information Disclosure Vulnerability	CVE-2026-20805		MEDIUM
2026-01-12 00:00	CVE-2025-8110 — Gogs Path Traversal Vulnerability	CVE-2025-8110		HIGH
2026-01-07 00:00	CVE-2025-37164 — Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability	CVE-2025-37164		CRITICAL
2026-01-07 00:00	CVE-2009-0556 — Microsoft Office PowerPoint Code Injection Vulnerability	CVE-2009-0556		HIGH
2025-12-29 00:00	CVE-2025-14847 — MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability	CVE-2025-14847	0.99678	HIGH
2025-12-22 00:00	CVE-2023-52163 — Digiever DS-2105 Pro Missing Authorization Vulnerability	CVE-2023-52163		HIGH
2025-12-19 00:00	CVE-2025-14733 — WatchGuard Firebox Out of Bounds Write Vulnerability	CVE-2025-14733	0.98001	CRITICAL
2025-12-17 00:00	CVE-2025-20393 — Cisco Multiple Products Improper Input Validation Vulnerability	CVE-2025-20393	0.98324	CRITICAL
2025-12-17 00:00	CVE-2025-40602 — SonicWall SMA1000 Missing Authorization Vulnerability	CVE-2025-40602		MEDIUM
2025-12-17 00:00	CVE-2025-59374 — ASUS Live Update Embedded Malicious Code Vulnerability	CVE-2025-59374		CRITICAL
2025-12-16 00:00	CVE-2025-59718 — Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability	CVE-2025-59718 CVE-2025-59719	0.99329	CRITICAL
2025-12-15 00:00	CVE-2025-14611 — Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability	CVE-2025-14611		HIGH
2025-12-15 00:00	CVE-2025-43529 — Apple Multiple Products Use-After-Free WebKit Vulnerability	CVE-2025-43529		HIGH
2025-12-12 00:00	CVE-2018-4063 — Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability	CVE-2018-4063		HIGH
2025-12-12 00:00	CVE-2025-14174 — Google Chromium Out of Bounds Memory Access Vulnerability	CVE-2025-14174		HIGH
2025-12-11 00:00	CVE-2025-58360 — OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability	CVE-2025-58360		HIGH
2025-12-09 00:00	CVE-2025-62221 — Microsoft Windows Use After Free Vulnerability	CVE-2025-62221		HIGH
2025-12-09 00:00	CVE-2025-6218 — RARLAB WinRAR Path Traversal Vulnerability	CVE-2025-6218		HIGH
2025-12-08 00:00	CVE-2025-66644 — Array Networks ArrayOS AG OS Command Injection Vulnerability	CVE-2025-66644		HIGH
2025-12-08 00:00	CVE-2022-37055 — D-Link Routers Buffer Overflow Vulnerability	CVE-2022-37055		CRITICAL
2025-12-05 00:00	CVE-2025-55182 — Meta React Server Components Remote Code Execution Vulnerability	CVE-2025-55182 CVE-2025-66478	0.99958	CRITICAL
2025-12-03 00:00	CVE-2021-26828 — OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability	CVE-2021-26828		HIGH
2025-12-02 00:00	CVE-2025-48572 — Android Framework Privilege Escalation Vulnerability	CVE-2025-48572		HIGH
2025-12-02 00:00	CVE-2025-48633 — Android Framework Information Disclosure Vulnerability	CVE-2025-48633		MEDIUM
2025-11-28 00:00	CVE-2021-26829 — OpenPLC ScadaBR Cross-site Scripting Vulnerability	CVE-2021-26829		MEDIUM
2025-11-21 00:00	CVE-2025-61757 — Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability	CVE-2025-61757		CRITICAL
2025-11-19 00:00	CVE-2025-13223 — Google Chromium V8 Type Confusion Vulnerability	CVE-2025-13223		HIGH
2025-11-18 00:00	CVE-2025-58034 — Fortinet FortiWeb OS Command Injection Vulnerability	CVE-2025-58034		MEDIUM
2025-11-14 00:00	CVE-2025-64446 — Fortinet FortiWeb Path Traversal Vulnerability	CVE-2025-64446		CRITICAL
2025-11-12 00:00	CVE-2025-62215 — Microsoft Windows Race Condition Vulnerability	CVE-2025-62215		HIGH
2025-11-12 00:00	CVE-2025-12480 — Gladinet Triofox Improper Access Control Vulnerability	CVE-2025-12480		CRITICAL
2025-11-12 00:00	CVE-2025-9242 — WatchGuard Firebox Out-of-Bounds Write Vulnerability	CVE-2025-9242		CRITICAL
2025-11-10 00:00	CVE-2025-21042 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability	CVE-2025-21042		HIGH

Alle Quellen