CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
Affected vendors and products
More on Catalog
Other advisories
- Not ratedosv:CLEANSTART-2024-ZW22260infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4
- HighCVE-2026-116851impleCode eCommerce Product Catalog: Cross-Site-Scripting (XSS)
- HighCVE-2026-116851impleCode eCommerce Product Catalog: Cross-Site-Scripting (XSS)
- HighCVE-2026-118078PixelYourSite Product Catalog Feed by PixelYourSite: Deserialisierung nicht vertrauenswürdiger Daten
- HighCVE-2026-118078PixelYourSite Product Catalog Feed by PixelYourSite: Deserialisierung nicht vertrauenswürdiger Daten
- LowCVE-2026-115366OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs
- MediumCVE-2026-115923Backstage catalog rules can be bypassed for URL locations using encoded path segments
- MediumCVE-2026-115923Backstage catalog rules can be bypassed for URL locations using encoded path segments
Other news entries
- Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessNewsThe Hacker News
- China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail VisibilityNewsThe Hacker News
- Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.NewsThe Hacker News
- CISA Warns of Node2Shell Exploitation as Honeypots Log Attack AttemptsNewsSecurityWeek
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesNewsThe Hacker News
- CISA confirms PHP2Shell vulnerabilities now exploited in attacksNewsBleepingComputer
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionNewsThe Hacker News
- NCSC-2026-0444 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle CommunicationsNewsNCSC-NL
Source: https://thehackernews.com/2026/06/cisa-adds-cisco-chrome-and-arista-flaws.html
ID