Sec Feed Reader

CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Quellen-ID (source_id): cisa_kev
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: cisa_kev_json
Sprache: de
Zielgruppe: —
Tags: cisa, kev
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa"	-

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 2 von 36

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2026-09-10 00:00	CVE-2026-86060 — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability	CVE-2026-86060		CRITICAL
2026-09-09 00:00	CVE-2026-20079 — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability	CVE-2026-20079		CRITICAL
2026-09-09 00:00	CVE-2026-87491 — Google Chromium V8 Out of Bounds Write Vulnerability	CVE-2026-87491		HIGH
2026-09-09 00:00	CVE-2026-19490 — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability	CVE-2026-19490		CRITICAL
2026-09-09 00:00	CVE-2025-25249 — Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability	CVE-2025-25249		HIGH
2026-09-08 00:00	CVE-2026-85880 — Microsoft Windows Heap-Based Buffer Overflow Vulnerability	CVE-2026-85880		HIGH
2026-09-08 00:00	CVE-2026-86218 — N-able N-central Static Code Injection Vulnerability	CVE-2026-86218		CRITICAL
2026-09-08 00:00	CVE-2026-75650 — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability	CVE-2026-75650		CRITICAL
2026-09-08 00:00	CVE-2026-81963 — Microsoft Windows Link Following Vulnerability	CVE-2026-81963		HIGH
2026-09-04 00:00	CVE-2026-85046 — Google Chromium V8 Type Confusion Vulnerability	CVE-2026-85046		HIGH
2026-09-02 00:00	CVE-2026-49869 — Kestra OSS OS Command Injection Vulnerability	CVE-2026-49869		CRITICAL
2026-09-02 00:00	CVE-2026-82329 — JFrog Artifactory Improper Authentication Vulnerability	CVE-2026-82329		CRITICAL
2026-09-02 00:00	CVE-2026-9586 — Sangoma Switchvox SQL Injection Vulnerability	CVE-2026-9586		CRITICAL
2026-09-02 00:00	CVE-2026-83549 — SonicWall SMA1000 Appliances OS Command Injection Vulnerability	CVE-2026-83549	0.95544	HIGH
2026-09-02 00:00	CVE-2026-48710 — Kludex Starlette HTTP Request/Response Smuggling Vulnerability	CVE-2026-42271 CVE-2026-48710		HIGH
2026-09-02 00:00	CVE-2026-83548 — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability	CVE-2026-83548	0.94746	CRITICAL
2026-09-02 00:00	CVE-2026-59822 — BerriAI LiteLLM Improper Authentication Vulnerability	CVE-2026-59822		HIGH
2026-08-31 00:00	CVE-2026-81578 — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability	CVE-2026-81578 CVE-2026-82078		CRITICAL
2026-08-31 00:00	CVE-2026-82078 — PaperCut NG/MF Unsafe Reflection Vulnerability	CVE-2026-81578 CVE-2026-82078		CRITICAL
2026-08-27 00:00	CVE-2023-49105 — ownCloud Improper Authentication Vulnerability	CVE-2023-49105		CRITICAL
2026-08-27 00:00	CVE-2026-53362 — Linux Kernel Unspecified Vulnerability	CVE-2026-53362		HIGH
2026-08-27 00:00	CVE-2026-66384 — JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability	CVE-2026-66384		MEDIUM
2026-08-26 00:00	CVE-2022-0995 — Linux Kernel Out-of-Bounds Write Vulnerability	CVE-2022-0995		HIGH
2026-08-26 00:00	CVE-2015-3246 — Red Hat Libuser Race Condition Vulnerability	CVE-2015-3246		MEDIUM
2026-08-26 00:00	CVE-2015-5287 — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability	CVE-2015-5287		HIGH
2026-08-26 00:00	CVE-2019-1068 — Microsoft SQL Server Remote Code Execution Vulnerability	CVE-2019-1068		HIGH
2026-08-26 00:00	CVE-2021-23758 — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability	CVE-2021-23758		HIGH
2026-08-26 00:00	CVE-2026-8452 — Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	CVE-2026-8452		HIGH
2026-08-25 00:00	CVE-2026-60004 — Gitea Code Injection Vulnerability	CVE-2026-60004		CRITICAL
2026-08-24 00:00	CVE-2026-21962 — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability	CVE-2026-21962		CRITICAL
2026-08-21 00:00	CVE-2026-73570 — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability	CVE-2026-73570		HIGH
2026-08-21 00:00	CVE-2026-69836 — Microsoft Entra ID Deserialization of Untrusted Data Vulnerability	CVE-2026-69836		CRITICAL
2026-08-20 00:00	CVE-2026-72529 — TrueConf Server Missing Authentication for Critical Function Vulnerability	CVE-2026-72529		CRITICAL
2026-08-20 00:00	CVE-2026-72530 — TrueConf Server Code Injection Vulnerability	CVE-2026-72530		CRITICAL
2026-08-19 00:00	CVE-2026-64849 — MLflow Server-Side Request Forgery Vulnerability	CVE-2026-64849		CRITICAL
2026-08-18 00:00	CVE-2026-65400 — Apple macOS Improper Authentication Vulnerability	CVE-2026-65400		HIGH
2026-08-18 00:00	CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability	CVE-2026-33824	0.75735	CRITICAL
2026-08-18 00:00	CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability	CVE-2026-55040		CRITICAL
2026-08-18 00:00	CVE-2026-59310 — Broadcom VMware vCenter Path Traversal Vulnerability	CVE-2026-59310		CRITICAL
2026-08-17 00:00	CVE-2025-62593 — Ray-Project Ray Code Injection Vulnerability	CVE-2025-62593		CRITICAL
2026-08-11 00:00	CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability	CVE-2026-20349		HIGH
2026-08-11 00:00	CVE-2026-72898 — Metabase SQL Injection Vulnerability	CVE-2026-72898		CRITICAL
2026-08-11 00:00	CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability	CVE-2026-68820		HIGH
2026-08-07 00:00	CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability	CVE-2026-33691 CVE-2026-8037		CRITICAL
2026-08-05 00:00	CVE-2026-63077 — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability	CVE-2026-63077		CRITICAL
2026-08-04 00:00	CVE-2026-9198 — IBM Langflow Code Injection Vulnerability	CVE-2026-9198		CRITICAL
2026-08-04 00:00	CVE-2026-18556 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability	CVE-2026-18556 CVE-2026-18577		HIGH
2026-08-04 00:00	CVE-2026-34486 — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability	CVE-2026-34486		HIGH
2026-08-03 00:00	CVE-2026-18577 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability	CVE-2026-18556 CVE-2026-18577		HIGH
2026-07-29 00:00	CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability	CVE-2026-20316		MEDIUM

Alle Quellen