NewsCISA Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability CVE-2025-40602 SonicWall SMA1000 Missing Authorization…
Teaser aus der Quelle
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability CVE-2025-40602 SonicWall SMA1000 Missing Authorization…
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei CISA Advisories lesenBetroffene Hersteller und Produkte
Mehr zu Catalog
Weitere Advisories
- Ohne Bewertungosv:CVE-2026-64672Terragrunt catalog predictable temp symlink clobber
- Ohne Bewertungosv:CLEANSTART-2024-ZW22260infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4
- HochCVE-2026-116851impleCode eCommerce Product Catalog: Cross-Site-Scripting (XSS)
- HochCVE-2026-116851impleCode eCommerce Product Catalog: Cross-Site-Scripting (XSS)
- HochCVE-2026-118078PixelYourSite Product Catalog Feed by PixelYourSite: Deserialisierung nicht vertrauenswürdiger Daten
- HochCVE-2026-118078PixelYourSite Product Catalog Feed by PixelYourSite: Deserialisierung nicht vertrauenswürdiger Daten
- NiedrigCVE-2026-115366OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs
- MittelCVE-2026-115923Backstage catalog rules can be bypassed for URL locations using encoded path segments
Weitere News-Einträge
- Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA SaysNewsThe Hacker News
- CISA Confirms Hackers Exploiting WordPress Core Flaw During Software UpgradesNewsThe Hacker News
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack ChainNewsSecurityWeek
- Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessNewsThe Hacker News
- China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail VisibilityNewsThe Hacker News
- Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.NewsThe Hacker News
- CISA Warns of Node2Shell Exploitation as Honeypots Log Attack AttemptsNewsSecurityWeek
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesNewsThe Hacker News
ID