Vulnerabilities
Leading to code execution, authentication bypass, and privilege escalation, the flaws were added to CISA’s KEV list.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA KEV"
Vulnerabilities
The cybersecurity agency has added CVE-2025-61884 to its Known Exploited Vulnerabilities (KEV) catalog.
Vulnerabilities
A public PoC existed when Adobe patched the Experience Manager Forms (AEM Forms) bug in early August.
Vulnerabilities
Patched in mid-May, the security defect allows remote unauthenticated attackers to execute arbitrary commands with root privileges.
Vulnerabilities
The vulnerability could allow local, low-privileged attackers to execute commands with root privileges, leading to full system compromise.
Vulnerabilities
CISA urges federal agencies to immediately patch an exploited arbitrary file write vulnerability in Git that leads to remote code execution.
Vulnerabilities
CISA reported becoming aware of attacks exploiting CVE-2025-8875 and CVE-2025-8876 in N-able N-central on the day they were patched.
Vulnerabilities
Threat actors are exploiting a two-year-old vulnerability in PaperCut that allows them to execute arbitrary code remotely.
Vulnerabilities
CISA has added two recent SysAid vulnerabilities, CVE-2025-2776 and CVE-2025-2775, to its KEV catalog.
Vulnerabilities
CISA considers the recently disclosed CitrixBleed 2 vulnerability an unacceptable risk and has added it to the KEV catalog.
Vulnerabilities
CISA says two more vulnerabilities in the messaging application TeleMessage TM SGNL have been exploited in the wild.
Vulnerabilities
CISA is urging federal agencies to patch a recent AMI BMC vulnerability and a half-a-decade-old bug in FortiOS by July 17.
Vulnerabilities
Qualys has disclosed two Linux vulnerabilities that can be chained for full root access, and CISA added a flaw to its KEV catalog.
Vulnerabilities
CISA warns that a vulnerability impacting multiple discontinued TP-Link router models is exploited in the wild.
Incident Response
New report says organizations should always consider environmental context when assessing the impact of vulnerabilities in CISA KEV catalog.
Artificial Intelligence
CISA warns organizations that threat actors are exploiting a critical-severity vulnerability in low-code AI builder Langflow.
Vulnerabilities
PoC code targeting two exploited SonicWall flaws was published just CISA added them to the KEV catalog.
Vulnerabilities
CISA urges immediate patching for recently disclosed Broadcom, Commvault, and Qualitia vulnerabilities exploited in the wild.
Vulnerabilities
CISA has added fresh CentreStack and Windows CLFS vulnerabilities to the Known Exploited Vulnerabilities catalog.
Vulnerabilities
CISA has added an absolute path traversal bug in Nakivo Backup and Replication to its Known Exploited Vulnerabilities list.
Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Artificial Intelligence
Artificial Intelligence
Vulnerabilities
Mobile & Wireless
Artificial Intelligence
The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.
Malware & Threats
Management & Strategy
