Elektrine
Log in Register

#kev

33 posts · Last used 11d

ssvc @ssvc@infosec.exchange
· 1w ago
Replying to
CISA working on a Sunday: Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-887712 were added to the Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. https://www.cisa.gov/news-event/alerts/2026/09/27/cisa-adds-two-known-exploited-vulnerabilities-catalog #KEV #Citrix #NetScaler #zeroday #CVE
cisa.gov
0
0
0
0
CyberSecureFox :loading: @cybersecurefox@infosec.exchange
· 2w ago
CVE-2026-76460: Cisco ISE authentication bypass with CVSS 10.0 🔗 https://cybersecurefox.com/en/cve-2026-76460-cisco-ise-authentication-bypass-cvss-10-0 #CVE-2026-76460 #Cisco #ISE #authentication #bypass #CVSS #10.0 #CISA #KEV
CVE-2026-76460: Cisco ISE Authentication Bypass With CVSS 10.0
CyberSecureFox

CVE-2026-76460: Cisco ISE Authentication Bypass With CVSS 10.0

Cisco has published an alert about a critical vulnerability, CVE-2026-76460 (CVSS 10.0), in Identity Services Engine (ISE) and ISE Passive Identity Connector

2
0
2
0
CyberSecureFox :loading: @cybersecurefox@infosec.exchange
· 2w ago
CVE-2026-58704: Pixel modem vulnerability added to CISA KEV catalog 🔗 https://cybersecurefox.com/en/cve-2026-58704-pixel-modem-privilege-escalation-cisa-kev #CVE-2026-58704 #Google #Pixel #Cellular #Modem #CISA #KEV #privilege #escalation
CVE-2026-58704: Pixel Modem Vulnerability Added To CISA KEV Catalog
CyberSecureFox

CVE-2026-58704: Pixel Modem Vulnerability Added To CISA KEV Catalog

The privilege escalation vulnerability CVE-2026-58704 in the cellular modem of Google Pixel smartphones was added to CISA’s Known Exploited Vulnerabilities

2
0
2
0
CyberSecureFox :loading: @cybersecurefox@infosec.exchange
· 1mo ago
CVE-2026-8037: CISA Adds Progress LoadMaster Flaw to KEV 🔗 https://cybersecurefox.com/en/cve-2026-8037-progress-kemp-loadmaster #cve-2026-8037 #progress #kemp #loadmaster #cisa #kev #command #injection #exploited #vulnerability
CVE-2026-8037: CISA Adds Progress LoadMaster Flaw To KEV
CyberSecureFox

CVE-2026-8037: CISA Adds Progress LoadMaster Flaw To KEV

On August 7, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added vulnerability CVE-2026-8037 to the Known Exploited Vulnerabilities

0
0
0
0
CyberSecureFox :loading: @cybersecurefox@infosec.exchange
· 2mo ago
CISA Adds Three Actively Exploited Flaws to KEV Catalog 🔗 https://cybersecurefox.com/en/cisa-adds-langflow-tomcat-n-central-kev #cisa #kev #catalog #langflow #rce #apache #tomcat #encryption #bypass #n-able #n-central #authentication #bypass
CISA Adds Three Actively Exploited Flaws To KEV Catalog
CyberSecureFox

CISA Adds Three Actively Exploited Flaws To KEV Catalog

CISA has added three vulnerabilities with confirmed active exploitation to the Known Exploited Vulnerabilities (KEV) catalog: a critical RCE in Langflow

0
0
0
0
CyberSecureFox :loading: @cybersecurefox@infosec.exchange
· 2mo ago
CVE-2026-18577: N-able N-central Auth Bypass Exploited 🔗 https://cybersecurefox.com/en/cve-2026-18577-n-able-n-central-auth-bypass #CVE-2026-18577 #N-able #N-central #CISA #KEV #authentication #bypass #RMM #security
CVE-2026-18577: N-able N-central Auth Bypass Exploited
CyberSecureFox

CVE-2026-18577: N-able N-central Auth Bypass Exploited

CVE-2026-18577 is an authentication bypass vulnerability in the N-able N-central remote monitoring platform (CVSS 8.2). It was added by CISA to the Known

2
0
2
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
TeamCity vulnerability CVE-2026-63077 enables unauthenticated remote code execution. CISA added it to the KEV catalog amid active exploitation. #TeamCity #CVE202663077 #RCE #CISA #KEV #CyberSecurity https://securityonline.info/teamcity-cve-2026-63077-rce/?utm_source=mastodon&utm_medium=jetpack_social
CVE-2026-63077: TeamCity RCE Flaw Exploited in the Wild, CISA Warns
Daily CyberSecurity

CVE-2026-63077: TeamCity RCE Flaw Exploited in the Wild, CISA Warns

TeamCity vulnerability CVE-2026-63077 enables unauthenticated remote code execution. CISA added it to the KEV catalog amid active exploitation.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
CISA added three bugs to its KEV list. An N-able N-central authentication bypass is exploited in the wild to deploy RMM tools. Patch by August 7. #Nable #Ncentral #CISA #KEV #CVE202618556 #ExploitedInTheWild #RMM #Langflow #ApacheTomcat #CyberSecurity #InfoSec https://securityonline.info/n-able-n-central-exploited-cisa-kev/?utm_source=mastodon&utm_medium=jetpack_social
N-able N-central Flaw Exploited in the Wild as CISA Adds Three to KEV Catalog
Daily CyberSecurity

N-able N-central Flaw Exploited in the Wild as CISA Adds Three to KEV Catalog

CISA added three bugs to its KEV list. An N-able N-central authentication bypass is exploited in the wild to deploy RMM tools. Patch by August 7.

0
0
0
0
CyberSecureFox :loading: @cybersecurefox@infosec.exchange
· 2mo ago
CISA Adds Cisco Secure FMC CVE-2026-20316 to KEV 🔗 https://cybersecurefox.com/en/cisco-secure-fmc-cve-2026-20316-kev #cisco #secure #fmc #cve-2026-20316 #cve-2026-20079 #cisa #kev #static #credentials
CISA Adds Cisco Secure FMC CVE-2026-20316 To KEV
CyberSecureFox

CISA Adds Cisco Secure FMC CVE-2026-20316 To KEV

The root cause of CVE-2026-20316 is the presence of hard-coded (static) credentials for a low-privileged account in Cisco Secure FMC software. As Cisco stated

2
0
2
0
CyberSecureFox :loading: @cybersecurefox@infosec.exchange
· 2mo ago
CVE-2026-16812: Critical Arista VCO Flaw Exploited 🔗 https://cybersecurefox.com/en/arista-velocloud-orchestrator-cve-2026-16812-command-injection #arista #velocloud #orchestrator #cve-2026-16812 #sd-wan #command #injection #cisa #kev
CVE-2026-16812: Critical Arista VCO Flaw Exploited
CyberSecureFox

CVE-2026-16812: Critical Arista VCO Flaw Exploited

The critical vulnerability CVE-2026-16812 with a maximum CVSS score of 10.0 in on-premises versions of Arista VeloCloud Orchestrator (VCO) has been confirmed

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
A Cisco FMC vulnerability, CVE-2026-20316, is exploited in the wild. Static credentials let attackers log in. CISA added it to KEV — patch now. #Cisco #CVE202620316 #FMC #KEV #Vulnerability #InfoSec https://securityonline.info/cisco-fmc-cve-2026-20316/?utm_source=mastodon&utm_medium=jetpack_social
Cisco FMC Flaw CVE-2026-20316 Exploited in the Wild
Daily CyberSecurity

Cisco FMC Flaw CVE-2026-20316 Exploited in the Wild

A Cisco FMC vulnerability, CVE-2026-20316, is exploited in the wild. Static credentials let attackers log in. CISA added it to KEV — patch now.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
CISA KEV additions on July 27 flag two known exploited vulnerabilities: Arista VeloCloud CVE-2026-16812 and FortiOS CVE-2025-68686. Patch both now. #CISA #KEV #Arista #VeloCloud #Fortinet #FortiOS #CVE #ExploitedInTheWild #Cybersecurity https://securityonline.info/cisa-kev-arista-velocloud-fortios/?utm_source=mastodon&utm_medium=jetpack_social
CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited
Daily CyberSecurity

CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited

CISA KEV additions on July 27 flag two known exploited vulnerabilities: Arista VeloCloud CVE-2026-16812 and FortiOS CVE-2025-68686. Patch both now.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
CISA added four flaws to its KEV catalog, including WordPress RCE (CVE-2026-63030) and Langflow RCE (CVE-2026-0770). All are exploited in the wild. #CISA #KEV #WordPress #Langflow #DDWRT #RCE #SQLInjection https://securityonline.info/cisa-kev-four-exploited-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog
Daily CyberSecurity

CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog

CISA added four flaws to its KEV catalog, including WordPress RCE (CVE-2026-63030) and Langflow RCE (CVE-2026-0770). All are exploited in the wild.

0
0
0
0
CyberSecureFox :loading: @cybersecurefox@infosec.exchange
· 2mo ago
CISA Flags CVE-2026-58644 SharePoint RCE in KEV Catalog 🔗 https://cybersecurefox.com/en/cisa-adds-cve-2026-58644-sharepoint-kev #CISA #CVE-2026-58644 #SharePoint #Server #vulnerability #KEV #catalog #IIS #machine #keys
CISA Flags CVE-2026-58644 SharePoint RCE In KEV Catalog
CyberSecureFox

CISA Flags CVE-2026-58644 SharePoint RCE In KEV Catalog

On July 16, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2026-58644 vulnerability in Microsoft SharePoint Server to

2
0
2
0
OffSequence @offseq@infosec.exchange
· 2mo ago
CVE-2026-58644: CRITICAL RCE in Microsoft SharePoint enables remote, authenticated Site Owners to execute code via deserialization. Exploited in the wild — patch now (July 2026 updates). Details: https://radar.offseq.com/threat/fresh-sharepoint-vulnerability-exploited-soon-afte-951942a1c69ed88b #OffSeq #SharePoint #Vuln #KEV #Infosec
OffSeq Threat Radar

Fresh SharePoint Vulnerability Exploited Soon After Disclosure - Live Threat Intelligence - Threat Radar | OffSeq.com

Detailed information about Fresh SharePoint Vulnerability Exploited Soon After Disclosure. Get real-time updates, technical details, and mitigation strategies.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
CISA KEV catalog adds three actively exploited flaws: FortiSandbox CVE-2026-25089, CVE-2026-39808, and SharePoint CVE-2026-58644. Patch by July 19. #CISA #KEV #Fortinet #FortiSandbox #SharePoint #CVE202658644 #ActivelyExploited #CyberSecurity https://securityonline.info/cisa-kev-fortisandbox-sharepoint/?utm_source=mastodon&utm_medium=jetpack_social
CISA Adds FortiSandbox and SharePoint Flaws to KEV Catalog After Confirming Active Exploitation
Daily CyberSecurity

CISA Adds FortiSandbox and SharePoint Flaws to KEV Catalog After Confirming Active Exploitation

CISA KEV catalog adds three actively exploited flaws: FortiSandbox CVE-2026-25089, CVE-2026-39808, and SharePoint CVE-2026-58644. Patch by July 19.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 3mo ago
CISA added four actively exploited flaws to its KEV Catalog, including critical Joomla, Langflow, and ColdFusion bugs. Agencies must patch by July 10. #CISA #KEV #ActivelyExploited #Joomla #ColdFusion #Langflow #InfoSec https://securityonline.info/cisa-kev-four-actively-exploited-flaws/?utm_source=mastodon&utm_medium=jetpack_social
CISA Adds Four Actively Exploited Flaws to Its KEV Catalog
Daily CyberSecurity

CISA Adds Four Actively Exploited Flaws to Its KEV Catalog

CISA added four actively exploited flaws to its KEV Catalog, including critical Joomla, Langflow, and ColdFusion bugs. Agencies must patch by July 10.

0
0
0
0
Cedric @cedric@social.circl.lu
· 3mo ago
A new KEV Catalog built from real-world exploitation data ! https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/?sort=first_seen&catalog_uuid=c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8 We are excited to share the result of a fruitful collaboration with @shadowserver@infosec.exchange: a new Known Exploited Vulnerabilities (KEV) Catalog (BCP-07 compliant) built directly from their global honeypot telemetry. #ShadowServer #KEV #GCVE #Vulnerability #VulnerabilityManagement #Decentralization #Fragmentation
Vulnerability-Lookup
vulnerability.circl.lu

Vulnerability-Lookup

Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.

3
0
3
0