Sec Feed Reader

CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Quellen-ID (source_id): cisa_kev
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: cisa_kev_json
Sprache: de
Zielgruppe: —
Tags: cisa, kev
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa"	-

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 1 von 36

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2026-10-20 00:00	CVE-2026-96652 — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability	CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 +1		HIGH
2026-10-20 00:00	CVE-2026-96655 — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability	CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 +1		HIGH
2026-10-20 00:00	CVE-2026-96656 — Plex Media Server External Control of File Name or Path Vulnerability	CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 +1		HIGH
2026-10-20 00:00	CVE-2026-110936 — Siemens Software Center Uncontrolled Search Path Element Vulnerability	CVE-2026-110936		HIGH
2026-10-20 00:00	CVE-2026-96654 — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability	CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 +1		HIGH
2026-10-20 00:00	CVE-2026-106931 — EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability	CVE-2026-106931		HIGH
2026-10-16 00:00	CVE-2025-61624 — Fortinet Multiple Products Path Traversal Vulnerability	CVE-2025-61624		MEDIUM
2026-10-16 00:00	CVE-2026-102764 — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability	CVE-2026-102764	0.67244	CRITICAL
2026-10-15 00:00	CVE-2026-21589 — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability	CVE-2026-21589		CRITICAL
2026-10-14 00:00	CVE-2026-105134 — Ahsay AhsayCBS Command Injection Vulnerability	CVE-2026-105133 CVE-2026-105134		CRITICAL
2026-10-14 00:00	CVE-2026-105133 — Ahsay AhsayCBS Improper Authentication Vulnerability	CVE-2026-105133 CVE-2026-105134		CRITICAL
2026-10-14 00:00	CVE-2026-76519 — Cisco Secure Email Gateway Relative Path Traversal Vulnerability	CVE-2026-76519	0.75068	CRITICAL
2026-10-14 00:00	CVE-2026-0322 — Palo Alto Networks PAN-OS Code Injection Vulnerability	CVE-2026-0322		HIGH
2026-10-13 00:00	CVE-2026-96951 — Microsoft Windows Command Injection Vulnerability	CVE-2026-96951		HIGH
2026-10-13 00:00	CVE-2026-104935 — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability	CVE-2026-104935	0.97972	HIGH
2026-10-08 00:00	CVE-2023-22894 — Strapi Cleartext Storage of Sensitive Information Vulnerability	CVE-2023-22621 CVE-2023-22894		CRITICAL
2026-10-08 00:00	CVE-2015-3306 — ProFTPD Improper Access Control Vulnerability	CVE-2015-3306		CRITICAL
2026-10-08 00:00	CVE-2015-5477 — ISC BIND Data Processing Errors Vulnerability	CVE-2015-5477		HIGH
2026-10-08 00:00	CVE-2016-3081 — Apache Struts Command Injection Vulnerability	CVE-2016-3081		HIGH
2026-10-08 00:00	CVE-2021-3199 — ONLYOFFICE Docs Server Path Traversal Vulnerability	CVE-2021-3199		CRITICAL
2026-10-04 00:00	CVE-2026-88779 — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	CVE-2026-88779		HIGH
2026-10-02 00:00	CVE-2026-102489 — Zammad GmbH Zammad Session Fixation Vulnerability	CVE-2026-102489 CVE-2026-102490		CRITICAL
2026-10-02 00:00	CVE-2026-102490 — Zammad GmbH Zammad Improper Privilege Management Vulnerability	CVE-2026-102489 CVE-2026-102490		CRITICAL
2026-10-01 00:00	CVE-2026-104286 — Fortinet FortiMail Path Traversal Vulnerability	CVE-2026-104286		CRITICAL
2026-09-30 00:00	CVE-2026-76504 — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability	CVE-2026-76504		CRITICAL
2026-09-29 00:00	CVE-2026-86950 — Apple Multiple Products Out-of-Bounds Write Vulnerability	CVE-2026-86950		HIGH
2026-09-27 00:00	CVE-2026-88771 — Citrix NetScaler Improper Input Validation Vulnerability	CVE-2026-88771 CVE-2026-88772 CVE-2026-88778	0.70063	CRITICAL
2026-09-27 00:00	CVE-2026-88772 — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	CVE-2026-88771 CVE-2026-88772 CVE-2026-88778	0.70063	CRITICAL
2026-09-25 00:00	CVE-2026-87902 — WordPress Core Remote File Inclusion Vulnerability	CVE-2026-87902		HIGH
2026-09-25 00:00	CVE-2026-67279 — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability	CVE-2026-67279 CVE-2026-86060		CRITICAL
2026-09-25 00:00	CVE-2026-65660 — Microsoft SharePoint Code Injection Vulnerability	CVE-2026-65660		HIGH
2026-09-24 00:00	CVE-2026-71362 — Adobe Commerce and Magento Incorrect Authorization Vulnerability	CVE-2026-71362		CRITICAL
2026-09-24 00:00	CVE-2026-5430 — WSO2 Multiple Products Path Traversal Vulnerability	CVE-2026-5430		CRITICAL
2026-09-22 00:00	CVE-2026-94127 — F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability	CVE-2026-94127	0.8248	CRITICAL
2026-09-22 00:00	CVE-2026-85102 — Check Point Multiple Products Improper Certificate Validation Vulnerability	CVE-2026-85102	0.98905	CRITICAL
2026-09-22 00:00	CVE-2026-93616 — Check Point Multiple Products Path Traversal Vulnerability	CVE-2026-93616	0.99525	CRITICAL
2026-09-22 00:00	CVE-2026-93952 — Arista VeloCloud Orchestrator Improper Input Validation Vulnerability	CVE-2026-93952		CRITICAL
2026-09-21 00:00	CVE-2026-7273 — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability	CVE-2026-7273		HIGH
2026-09-18 00:00	CVE-2026-53266 — Linux Kernel Out-of-Bounds Write Vulnerability	CVE-2026-53266		HIGH
2026-09-18 00:00	CVE-2025-39682 — Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability	CVE-2025-39682		CRITICAL
2026-09-18 00:00	CVE-2025-39964 — Linux Kernel Race Condition Vulnerability	CVE-2025-39964		HIGH
2026-09-16 00:00	CVE-2026-87886 — Acronis Backup Incorrect Default Permissions Vulnerability	CVE-2026-87886		HIGH
2026-09-16 00:00	CVE-2026-76460 — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability	CVE-2026-76460		CRITICAL
2026-09-16 00:00	CVE-2026-58704 — Google Pixel Improper Authorization Vulnerability	CVE-2026-58704		HIGH
2026-09-14 00:00	CVE-2026-76461 — Cisco Secure Email Gateway SQL Injection Vulnerability	CVE-2026-76461	0.98179	CRITICAL
2026-09-11 00:00	CVE-2026-42018 — JFrog Artifactory Improper Authentication Vulnerability	CVE-2026-42018		HIGH
2026-09-11 00:00	CVE-2026-84869 — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability	CVE-2026-84869		CRITICAL
2026-09-11 00:00	CVE-2026-42016 — JFrog Artifactory Incorrect Authorization Vulnerability	CVE-2026-42016		HIGH
2026-09-11 00:00	CVE-2026-85706 — GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability	CVE-2026-85706		CRITICAL
2026-09-10 00:00	CVE-2026-67277 — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability	CVE-2026-67277		HIGH

Alle Quellen