#cisa-kev
Loots, Blogposts und verwandte Themen rund um diesen Tag. Folge dem Tag, damit passende Updates in deinem Orbit bleiben.
Wenn du tiefer einsteigen willst, helfen die benachbarten Tags beim Vergleichen und Querlesen.
Mehr aus diesem Thema
Sobald die Community passende Fundstücke teilt, erscheinen sie hier. Du kannst inzwischen alle Loots durchsuchen oder selbst den ersten Drop einreichen.
Verwandte Artikel
CISA lists exploited Apple CoreGraphics flaw; iOS and macOS fixes available
CISA added CVE-2026-86950 to its exploited-vulnerability catalog. Apple has released fixes for supported iOS, iPadOS, and macOS versions and…
CVE-2026-87902 enters CISA KEV with WordPress patch deadline
CISA added WordPress Core CVE-2026-87902 to its KEV catalog on September 25, with a September 28 remediation deadline for covered federal ag…
CISA adds exploited TrueConf Server RCEs with an August 23 deadline
CISA added two exploited TrueConf Server flaws to KEV; federal agencies face an August 23 deadline for the unauthenticated script-execution …
Check Point SmartConsole auth bypass is exploited; admins face July 25 KEV deadline
CISA added CVE-2026-16232 to KEV after active exploitation of a Check Point SmartConsole authentication bypass that can grant full administr…
CISA lists DD-WRT UPnP RCE as exploited with July 24 deadline
CISA added CVE-2021-27137 to KEV on July 21 after DD-WRT exploitation was tied to the C0XMO botnet, giving covered agencies until July 24 to…
CISA puts WordPress wp2shell RCE in KEV with July 24 deadline
CISA now lists two WordPress Core wp2shell vulnerabilities as actively exploited, with a July 24 deadline for CVE-2026-63030 and an August 4…
CISA adds Langflow RCE to KEV with July 24 remediation deadline
CISA now lists CVE-2026-0770 as actively exploited, giving covered agencies until July 24 to mitigate a Langflow remote-code-execution flaw …
Patch Oracle E-Business Suite Payments Before the New KEV Deadline
CISA added CVE-2026-46817 to the KEV catalog with a July 18 deadline after evidence of active exploitation. Oracle E-Business Suite teams sh…
Patch AD FS CVE-2026-56155 Before a Foothold Becomes Admin Access
Microsoft and CISA list CVE-2026-56155 as an actively exploited AD FS elevation-of-privilege flaw. Patch exposed Windows Server estates firs…
Patch SharePoint CVE-2026-56164 Before a Low CVSS Score Hides the KEV Risk
Microsoft's July 2026 Patch Tuesday includes an actively exploited SharePoint Server privilege escalation flaw that NVD lists in CISA KEV, d…
Patch SonicWall SMA 1000 Now, Then Check for Compromise
SonicWall says two SMA 1000 vulnerabilities are actively exploited, and CISA has added the issues to KEV. Patch affected appliances, then re…
Find Old Cisco IOS Routers Before CVE-2008-4128 Becomes a Pivot
CISA added CVE-2008-4128 to KEV on July 13, 2026. The flaw affects obsolete Cisco IOS 12.4 systems, so the practical task is inventory, isol…
Patch Langflow now: CISA flags CVE-2026-55255 as actively exploited
CISA added Langflow CVE-2026-55255 to the Known Exploited Vulnerabilities catalog, giving federal agencies until July 10, 2026 to mitigate a…
Patch UniFi OS before the RCE chain becomes your network foothold
Ubiquiti's UniFi OS command-injection flaw is now listed as actively exploited, and Bishop Fox shows how it can sit inside an unauthenticate…
Patch Cisco SD-WAN Manager before CVE-2026-20262 turns into root access
Cisco says CVE-2026-20262 lets an authenticated attacker create or overwrite files on Catalyst SD-WAN Manager systems and may later be used …
Treat Microsoft Defender BlueHammer as ransomware-relevant, not just patched
CISA now marks Microsoft Defender CVE-2026-33825, known as BlueHammer, with known ransomware campaign use in the KEV catalog.
Patch SimpleHelp OIDC before CISA's July 2 KEV deadline
CISA added CVE-2026-48558 to KEV on June 29, giving defenders a July 2 deadline for a SimpleHelp OIDC authentication bypass that can create …