{ "feed": "exploited-cve-watchlist", "generated_at": "2026-10-20T07:52:53Z", "source": "CISA KEV + FIRST EPSS", "total_kev": 1748, "count": 495, "items": [ { "cve": "CVE-2025-61624", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Path Traversal Vulnerability", "description": "FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.", "date_added": "2026-10-16", "due_date": "2026-10-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-22" ], "epss": 0.01081, "epss_percentile": 0.64604, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-61624", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61624" } ] }, { "cve": "CVE-2026-21589", "vendor": "Atlassian", "product": "Multiple Products", "name": "Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability", "description": "Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.", "date_added": "2026-10-15", "due_date": "2026-10-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-552" ], "epss": null, "epss_percentile": null, "epss_date": null, "india_relevance": "high", "relevance_match": "atlassian", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21589", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21589" } ] }, { "cve": "CVE-2026-76519", "vendor": "Cisco", "product": "Secure Email Gateway", "name": "Cisco Secure Email Gateway Relative Path Traversal Vulnerability", "description": "Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.", "date_added": "2026-10-14", "due_date": "2026-10-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-23" ], "epss": 0.01573, "epss_percentile": 0.75044, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "cisco secure", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-76519", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76519" } ] }, { "cve": "CVE-2026-0322", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Code Injection Vulnerability", "description": "Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.", "date_added": "2026-10-14", "due_date": "2026-10-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-94" ], "epss": 0.01215, "epss_percentile": 0.68127, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-0322", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0322" } ] }, { "cve": "CVE-2026-104935", "vendor": "Ivanti", "product": "Connect Secure", "name": "Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability", "description": "Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.", "date_added": "2026-10-13", "due_date": "2026-10-16", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-290" ], "epss": 0.25982, "epss_percentile": 0.9797, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-104935", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104935" } ] }, { "cve": "CVE-2026-96951", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Command Injection Vulnerability", "description": "Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.", "date_added": "2026-10-13", "due_date": "2026-10-16", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-77" ], "epss": 0.01512, "epss_percentile": 0.74088, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-96951", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96951" } ] }, { "cve": "CVE-2016-3081", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Command Injection Vulnerability", "description": "Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.", "date_added": "2026-10-08", "due_date": "2026-10-11", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-77" ], "epss": 0.96052, "epss_percentile": 0.99878, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "struts", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2016-3081", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3081" } ] }, { "cve": "CVE-2021-3199", "vendor": "ONLYOFFICE", "product": "Docs", "name": "ONLYOFFICE Docs Server Path Traversal Vulnerability", "description": "ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.", "date_added": "2026-10-08", "due_date": "2026-10-11", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-22" ], "epss": 0.20136, "epss_percentile": 0.97433, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-3199", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3199" } ] }, { "cve": "CVE-2026-88779", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "description": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.", "date_added": "2026-10-04", "due_date": "2026-10-07", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.00592, "epss_percentile": 0.47262, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-88779", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88779" } ] }, { "cve": "CVE-2026-104286", "vendor": "Fortinet", "product": "FortiMail", "name": "Fortinet FortiMail Path Traversal Vulnerability", "description": "Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.", "date_added": "2026-10-01", "due_date": "2026-10-04", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-22", "CWE-158" ], "epss": 0.02201, "epss_percentile": 0.82252, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-104286", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104286" } ] }, { "cve": "CVE-2026-76504", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability", "description": "Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.", "date_added": "2026-09-30", "due_date": "2026-10-03", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-177" ], "epss": 0.01819, "epss_percentile": 0.78422, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "catalyst", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-76504", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76504" } ] }, { "cve": "CVE-2026-86950", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Out-of-Bounds Write Vulnerability", "description": "Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.", "date_added": "2026-09-29", "due_date": "2026-10-13", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.01242, "epss_percentile": 0.68756, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-86950", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86950" } ] }, { "cve": "CVE-2026-88772", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "description": "Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service", "date_added": "2026-09-27", "due_date": "2026-09-30", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.01301, "epss_percentile": 0.70033, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-88772", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88772" } ] }, { "cve": "CVE-2026-88771", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Improper Input Validation Vulnerability", "description": "Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.", "date_added": "2026-09-27", "due_date": "2026-09-30", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.01083, "epss_percentile": 0.64682, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-88771", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88771" } ] }, { "cve": "CVE-2026-67279", "vendor": "MikroTik", "product": "RouterOS", "name": "Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability", "description": "Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.", "date_added": "2026-09-25", "due_date": "2026-09-28", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-841" ], "epss": 0.01027, "epss_percentile": 0.63056, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "mikrotik", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-67279", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67279" } ] }, { "cve": "CVE-2026-65660", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Code Injection Vulnerability", "description": "Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.", "date_added": "2026-09-25", "due_date": "2026-09-28", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-94" ], "epss": 0.02101, "epss_percentile": 0.81433, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-65660", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65660" } ] }, { "cve": "CVE-2026-87902", "vendor": "WordPress", "product": "Core", "name": "WordPress Core Remote File Inclusion Vulnerability", "description": "WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.", "date_added": "2026-09-25", "due_date": "2026-09-28", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-98" ], "epss": 0.39979, "epss_percentile": 0.98618, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "wordpress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-87902", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87902" } ] }, { "cve": "CVE-2026-71362", "vendor": "Adobe", "product": "Commerce and Magento ", "name": "Adobe Commerce and Magento Incorrect Authorization Vulnerability ", "description": "Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. ", "date_added": "2026-09-24", "due_date": "2026-09-27", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-863" ], "epss": 0.87507, "epss_percentile": 0.99759, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-71362", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71362" } ] }, { "cve": "CVE-2026-94127", "vendor": "F5", "product": "BIG-IP APM", "name": "F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability", "description": "F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution.", "date_added": "2026-09-22", "due_date": "2026-09-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-122" ], "epss": 0.02226, "epss_percentile": 0.8246, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "f5", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-94127", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94127" } ] }, { "cve": "CVE-2025-39964", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Race Condition Vulnerability", "description": "Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state.", "date_added": "2026-09-18", "due_date": "2026-09-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-362" ], "epss": 0.01362, "epss_percentile": 0.71354, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-39964", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-39964" } ] }, { "cve": "CVE-2026-53266", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Write Vulnerability", "description": "Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment backed by a splice-imported file page. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.", "date_added": "2026-09-18", "due_date": "2026-09-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.00827, "epss_percentile": 0.56735, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-53266", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53266" } ] }, { "cve": "CVE-2025-39682", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability", "description": "Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.", "date_added": "2026-09-18", "due_date": "2026-09-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-754" ], "epss": 0.0288, "epss_percentile": 0.86652, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-39682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-39682" } ] }, { "cve": "CVE-2026-58704", "vendor": "Google", "product": "Pixel", "name": "Google Pixel Improper Authorization Vulnerability", "description": "Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.", "date_added": "2026-09-16", "due_date": "2026-09-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-693" ], "epss": 0.00591, "epss_percentile": 0.47236, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "google", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-58704", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58704" } ] }, { "cve": "CVE-2026-76461", "vendor": "Cisco", "product": "Secure Email Gateway", "name": "Cisco Secure Email Gateway SQL Injection Vulnerability", "description": "Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.", "date_added": "2026-09-14", "due_date": "2026-09-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-89" ], "epss": 0.29543, "epss_percentile": 0.98178, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "cisco secure", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-76461", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76461" } ] }, { "cve": "CVE-2026-85706", "vendor": "GitLab", "product": "Community Edition and Enterprise Edition", "name": "GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability", "description": "GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.", "date_added": "2026-09-11", "due_date": "2026-09-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-35" ], "epss": 0.92956, "epss_percentile": 0.99833, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "gitlab", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-85706", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85706" } ] }, { "cve": "CVE-2026-86060", "vendor": "MikroTik", "product": "RouterOS", "name": "MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability", "description": "MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.", "date_added": "2026-09-10", "due_date": "2026-09-13", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-88" ], "epss": 0.06392, "epss_percentile": 0.93602, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "mikrotik", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-86060", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86060" } ] }, { "cve": "CVE-2026-67277", "vendor": "MikroTik", "product": "RouterOS", "name": "MikroTik RouterOS Missing Authentication for Critical Function Vulnerability", "description": "MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.", "date_added": "2026-09-10", "due_date": "2026-09-13", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-306" ], "epss": 0.0156, "epss_percentile": 0.7487, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "mikrotik", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-67277", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67277" } ] }, { "cve": "CVE-2026-19490", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability", "description": "Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.", "date_added": "2026-09-09", "due_date": "2026-09-12", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-288" ], "epss": 0.23158, "epss_percentile": 0.97751, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-19490", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19490" } ] }, { "cve": "CVE-2025-25249", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability", "description": "Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.", "date_added": "2026-09-09", "due_date": "2026-09-12", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-122", "CWE-787" ], "epss": 0.03802, "epss_percentile": 0.89894, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-25249", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25249" } ] }, { "cve": "CVE-2026-87491", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out of Bounds Write Vulnerability", "description": "Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2026-09-09", "due_date": "2026-09-23", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.03142, "epss_percentile": 0.87732, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-87491", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87491" } ] }, { "cve": "CVE-2026-20079", "vendor": "Cisco", "product": "Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management", "name": "Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability", "description": "Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.", "date_added": "2026-09-09", "due_date": "2026-09-12", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-288" ], "epss": 0.8818, "epss_percentile": 0.99769, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "cisco secure", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20079", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20079" } ] }, { "cve": "CVE-2026-75650", "vendor": "Adobe", "product": "Commerce and Magento", "name": "Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability", "description": "Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.", "date_added": "2026-09-08", "due_date": "2026-09-11", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-1336" ], "epss": 0.03949, "epss_percentile": 0.90296, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-75650", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75650" } ] }, { "cve": "CVE-2026-81963", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Link Following Vulnerability", "description": "Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.", "date_added": "2026-09-08", "due_date": "2026-09-22", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-59", "CWE-284" ], "epss": 0.00393, "epss_percentile": 0.3204, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-81963", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81963" } ] }, { "cve": "CVE-2026-85880", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Heap-Based Buffer Overflow Vulnerability", "description": "Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.", "date_added": "2026-09-08", "due_date": "2026-09-22", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-122", "CWE-908" ], "epss": 0.03616, "epss_percentile": 0.89371, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-85880", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85880" } ] }, { "cve": "CVE-2026-85046", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "description": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2026-09-04", "due_date": "2026-09-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-843" ], "epss": 0.48881, "epss_percentile": 0.98868, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-85046", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85046" } ] }, { "cve": "CVE-2026-83548", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "description": "SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.", "date_added": "2026-09-02", "due_date": "2026-09-05", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-918", "CWE-441" ], "epss": 0.08043, "epss_percentile": 0.94742, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-83548", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83548" } ] }, { "cve": "CVE-2026-83549", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances OS Command Injection Vulnerability", "description": "SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.", "date_added": "2026-09-02", "due_date": "2026-09-05", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.09889, "epss_percentile": 0.95539, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-83549", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83549" } ] }, { "cve": "CVE-2026-53362", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Unspecified Vulnerability", "description": "Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited to Suse, Red Hat, and other products using Linux. ", "date_added": "2026-08-27", "due_date": "2026-08-30", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [], "epss": 0.00709, "epss_percentile": 0.52652, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-53362", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53362" } ] }, { "cve": "CVE-2022-0995", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Write Vulnerability", "description": "Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.", "date_added": "2026-08-26", "due_date": "2026-08-29", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.08859, "epss_percentile": 0.95169, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-0995", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0995" } ] }, { "cve": "CVE-2026-8452", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "description": "Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service. ", "date_added": "2026-08-26", "due_date": "2026-08-29", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.01011, "epss_percentile": 0.62595, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-8452", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8452" } ] }, { "cve": "CVE-2026-21962", "vendor": "Oracle", "product": "HTTP Server and Oracle Weblogic Server Proxy Plug-in", "name": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability", "description": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.", "date_added": "2026-08-24", "due_date": "2026-08-27", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-284" ], "epss": 0.73192, "epss_percentile": 0.99456, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "weblogic", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21962", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21962" } ] }, { "cve": "CVE-2026-73570", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability", "description": "Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.", "date_added": "2026-08-21", "due_date": "2026-08-24", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.71663, "epss_percentile": 0.99417, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-73570", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73570" } ] }, { "cve": "CVE-2026-59310", "vendor": "Broadcom", "product": "VMware vCenter", "name": "Broadcom VMware vCenter Path Traversal Vulnerability", "description": "Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.", "date_added": "2026-08-18", "due_date": "2026-08-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.02565, "epss_percentile": 0.84898, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-59310", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59310" } ] }, { "cve": "CVE-2026-55040", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Weak Authentication Vulnerability", "description": "Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.", "date_added": "2026-08-18", "due_date": "2026-08-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-1390" ], "epss": 0.69536, "epss_percentile": 0.9936, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-55040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55040" } ] }, { "cve": "CVE-2026-65400", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Improper Authentication Vulnerability", "description": "Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials.", "date_added": "2026-08-18", "due_date": "2026-08-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-287" ], "epss": 0.01723, "epss_percentile": 0.77168, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-65400", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65400" } ] }, { "cve": "CVE-2026-20349", "vendor": "Cisco", "product": "Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ", "name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability", "description": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.", "date_added": "2026-08-11", "due_date": "2026-08-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-244" ], "epss": 0.0101, "epss_percentile": 0.62566, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "adaptive security", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20349", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20349" } ] }, { "cve": "CVE-2026-68820", "vendor": "Microsoft", "product": "Windows Ancillary Function Driver for WinSock ", "name": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability", "description": "Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.", "date_added": "2026-08-11", "due_date": "2026-08-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.00332, "epss_percentile": 0.24921, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-68820", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68820" } ] }, { "cve": "CVE-2026-8037", "vendor": "Progress", "product": "LoadMaster", "name": "Progress LoadMaster Command Injection Vulnerability", "description": "Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.", "date_added": "2026-08-07", "due_date": "2026-08-10", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-77" ], "epss": 0.77362, "epss_percentile": 0.99555, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "progress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-8037", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8037" } ] }, { "cve": "CVE-2026-63077", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Deserialization of Untrusted Data Vulnerability", "description": "JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.", "date_added": "2026-08-05", "due_date": "2026-08-08", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.8957, "epss_percentile": 0.99788, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "jetbrains teamcity", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-63077", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63077" } ] }, { "cve": "CVE-2026-34486", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Missing Encryption of Sensitive Data Vulnerability", "description": "Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE\u20112025\u201124813.", "date_added": "2026-08-04", "due_date": "2026-08-07", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-311" ], "epss": 0.06561, "epss_percentile": 0.93752, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "apache tomcat", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-34486", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34486" } ] }, { "cve": "CVE-2026-20316", "vendor": "Cisco", "product": "Secure Firewall Management Center (FMC)", "name": "Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability", "description": "Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.", "date_added": "2026-07-29", "due_date": "2026-08-01", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": true, "cwes": [ "CWE-259" ], "epss": 0.35096, "epss_percentile": 0.98429, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "cisco secure", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20316", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20316" } ] }, { "cve": "CVE-2025-68686", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability", "description": "Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.", "date_added": "2026-07-27", "due_date": "2026-08-10", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-200" ], "epss": 0.29499, "epss_percentile": 0.98175, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-68686", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68686" } ] }, { "cve": "CVE-2026-50522", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ", "description": "Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.", "date_added": "2026-07-22", "due_date": "2026-07-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-502" ], "epss": 0.03042, "epss_percentile": 0.87336, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-50522", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50522" } ] }, { "cve": "CVE-2026-60137", "vendor": "WordPress", "product": "Core", "name": "WordPress Core SQL Injection Vulnerability", "description": "WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations.", "date_added": "2026-07-21", "due_date": "2026-08-04", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-89" ], "epss": 0.05323, "epss_percentile": 0.92525, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "wordpress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-60137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60137" } ] }, { "cve": "CVE-2026-63030", "vendor": "WordPress", "product": "Core", "name": "WordPress Core Interpretation Conflict Vulnerability", "description": "WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.", "date_added": "2026-07-21", "due_date": "2026-07-24", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-436" ], "epss": 0.10649, "epss_percentile": 0.95764, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "wordpress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-63030", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63030" } ] }, { "cve": "CVE-2026-58644", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "description": "Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.", "date_added": "2026-07-16", "due_date": "2026-07-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-502" ], "epss": 0.15873, "epss_percentile": 0.9686, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-58644", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58644" } ] }, { "cve": "CVE-2026-25089", "vendor": "Fortinet", "product": "FortiSandbox", "name": "Fortinet FortiSandbox OS Command Injection Vulnerability", "description": "Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.", "date_added": "2026-07-16", "due_date": "2026-07-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.76112, "epss_percentile": 0.9953, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-25089", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25089" } ] }, { "cve": "CVE-2026-39808", "vendor": "Fortinet", "product": "FortiSandbox", "name": "Fortinet FortiSandbox OS Command Injection Vulnerability", "description": "Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.", "date_added": "2026-07-16", "due_date": "2026-07-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.47362, "epss_percentile": 0.9883, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-39808", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39808" } ] }, { "cve": "CVE-2026-46817", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Improper Privilege Management Vulnerability", "description": "Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.", "date_added": "2026-07-15", "due_date": "2026-07-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-269", "CWE-287", "CWE-306" ], "epss": 0.00814, "epss_percentile": 0.56292, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-46817", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46817" } ] }, { "cve": "CVE-2026-56164", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability", "description": "Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.", "date_added": "2026-07-14", "due_date": "2026-07-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-306" ], "epss": 0.01011, "epss_percentile": 0.6259, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-56164", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56164" } ] }, { "cve": "CVE-2026-15409", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "description": "SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.", "date_added": "2026-07-14", "due_date": "2026-07-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": true, "cwes": [ "CWE-918" ], "epss": 0.06795, "epss_percentile": 0.93938, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-15409", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15409" } ] }, { "cve": "CVE-2026-15410", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Code Injection Vulnerability", "description": "SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.", "date_added": "2026-07-14", "due_date": "2026-07-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": true, "cwes": [ "CWE-94" ], "epss": 0.11791, "epss_percentile": 0.96049, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-15410", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15410" } ] }, { "cve": "CVE-2008-4128", "vendor": "Cisco", "product": "IOS", "name": "Cisco IOS Cross-Site Request Forgery Vulnerability", "description": "Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain \"show privilege\" command to the /level/15/exec/- URI, and (2) a certain \"alias exec\" command to the /level/15/exec/-/configure/http URI.", "date_added": "2026-07-13", "due_date": "2026-07-16", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-352" ], "epss": 0.33871, "epss_percentile": 0.98383, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "ios", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2008-4128", "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4128" } ] }, { "cve": "CVE-2026-56290", "vendor": "Joomlack", "product": "Page Builder", "name": "Joomlack Page Builder Improper Access Control Vulnerability", "description": "Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.", "date_added": "2026-07-07", "due_date": "2026-07-10", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-284" ], "epss": 0.30866, "epss_percentile": 0.98241, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "joomla", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-56290", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56290" } ] }, { "cve": "CVE-2026-48282", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Path Traversal Vulnerability", "description": "Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.", "date_added": "2026-07-07", "due_date": "2026-07-10", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-22" ], "epss": 0.42388, "epss_percentile": 0.98692, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-48282", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48282" } ] }, { "cve": "CVE-2026-45659", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability", "description": "Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.", "date_added": "2026-07-01", "due_date": "2026-07-04", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.02704, "epss_percentile": 0.8574, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-45659", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45659" } ] }, { "cve": "CVE-2026-48907", "vendor": "Widget Factory", "product": "Joomla Content Editor ", "name": "Widget Factory Joomla Content Editor Improper Access Control Vulnerability", "description": "Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users. ", "date_added": "2026-06-16", "due_date": "2026-06-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-284" ], "epss": 0.1619, "epss_percentile": 0.96912, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "joomla", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-48907", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48907" } ] }, { "cve": "CVE-2026-20262", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability", "description": "Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.", "date_added": "2026-06-15", "due_date": "2026-06-29", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-22" ], "epss": 0.28171, "epss_percentile": 0.98099, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "catalyst", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20262", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20262" } ] }, { "cve": "CVE-2026-35273", "vendor": "Oracle", "product": " PeopleSoft Enterprise PeopleTools", "name": "Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability", "description": "Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools.", "date_added": "2026-06-12", "due_date": "2026-06-15", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": true, "cwes": [ "CWE-306" ], "epss": 0.96678, "epss_percentile": 0.99886, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-35273", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35273" } ] }, { "cve": "CVE-2026-10520", "vendor": "Ivanti", "product": "Sentry", "name": "Ivanti Sentry OS Command Injection Vulnerability", "description": "Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level remote code execution. This vulnerability can be successfully exploited in cases where the Sentry appliance is in an unmanaged state with its endpoints externally reachable. The use of mTLS with EPMM or restricted HTTPS access through Neurons for MDM makes interfaces inaccessible to external actors.", "date_added": "2026-06-11", "due_date": "2026-06-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.99915, "epss_percentile": 0.99968, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-10520", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10520" } ] }, { "cve": "CVE-2026-11645", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "description": "Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2026-06-09", "due_date": "2026-06-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-787", "CWE-125" ], "epss": 0.0244, "epss_percentile": 0.84067, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-11645", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11645" } ] }, { "cve": "CVE-2026-20245", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability", "description": "Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system.", "date_added": "2026-06-09", "due_date": "2026-06-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-116" ], "epss": 0.25323, "epss_percentile": 0.97928, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "catalyst", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20245", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20245" } ] }, { "cve": "CVE-2022-0492", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Authentication Vulnerability", "description": "Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.", "date_added": "2026-06-02", "due_date": "2026-06-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-287", "CWE-862" ], "epss": 0.05528, "epss_percentile": 0.92731, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-0492", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0492" } ] }, { "cve": "CVE-2025-48595", "vendor": "Android", "product": "Framework", "name": "Android Framework Integer Overflow Vulnerability", "description": "Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.", "date_added": "2026-06-02", "due_date": "2026-06-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-190" ], "epss": 0.01714, "epss_percentile": 0.77051, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "android", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-48595", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48595" } ] }, { "cve": "CVE-2024-21182", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "description": "Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.", "date_added": "2026-06-01", "due_date": "2026-06-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.74162, "epss_percentile": 0.99484, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "weblogic", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-21182", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21182" } ] }, { "cve": "CVE-2026-0257", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "description": "Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.", "date_added": "2026-05-29", "due_date": "2026-06-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-565" ], "epss": 0.96895, "epss_percentile": 0.99889, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-0257", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0257" } ] }, { "cve": "CVE-2026-9082", "vendor": "Drupal", "product": "Core", "name": "Drupal Core SQL Injection Vulnerability", "description": "Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API.", "date_added": "2026-05-22", "due_date": "2026-05-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-89" ], "epss": 0.15701, "epss_percentile": 0.9683, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "drupal", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-9082", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9082" } ] }, { "cve": "CVE-2008-4250", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Buffer Overflow Vulnerability", "description": "Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-94" ], "epss": 0.98751, "epss_percentile": 0.99926, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2008-4250", "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4250" } ] }, { "cve": "CVE-2009-3459", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability", "description": "Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption.", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.86646, "epss_percentile": 0.99741, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2009-3459", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3459" } ] }, { "cve": "CVE-2010-0249", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "description": "Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.91939, "epss_percentile": 0.99819, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2010-0249", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0249" } ] }, { "cve": "CVE-2010-0806", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "description": "Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-399" ], "epss": 0.82241, "epss_percentile": 0.99655, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2010-0806", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0806" } ] }, { "cve": "CVE-2026-20182", "vendor": "Cisco", "product": "Catalyst SD-WAN", "name": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability", "description": "Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.", "date_added": "2026-05-14", "due_date": "2026-05-17", "required_action": "Please adhere to CISA\u2019s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in CISA\u2019s Emergency Directive 26-03 (URL listed below in Notes) and CISA\u2019s Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": false, "cwes": [ "CWE-287" ], "epss": 0.91817, "epss_percentile": 0.99817, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "catalyst", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20182", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20182" } ] }, { "cve": "CVE-2026-6973", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability", "description": "Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.", "date_added": "2026-05-07", "due_date": "2026-05-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-20" ], "epss": 0.02537, "epss_percentile": 0.84717, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-6973", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6973" } ] }, { "cve": "CVE-2026-0300", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability", "description": "Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.", "date_added": "2026-05-06", "due_date": "2026-05-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented: - Restrict User-ID Authentication Portal access to only trusted zones. - Disable User-ID Authentication Portal if not required. 5/13/2026: Palo Alto has released a variety of patches. If these are relevant to your environment, please apply the designated patch.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.31725, "epss_percentile": 0.98287, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-0300", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0300" } ] }, { "cve": "CVE-2026-31431", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability", "description": "Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.", "date_added": "2026-05-01", "due_date": "2026-05-15", "required_action": "\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-669" ], "epss": 0.03437, "epss_percentile": 0.88816, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-31431", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31431" } ] }, { "cve": "CVE-2026-41940", "vendor": "WebPros", "product": "cPanel & WHM and WP2 (WordPress Squared)", "name": "WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability", "description": "WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.", "date_added": "2026-04-30", "due_date": "2026-05-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-306" ], "epss": 0.98527, "epss_percentile": 0.99922, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "wordpress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-41940", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41940" } ] }, { "cve": "CVE-2026-32202", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Protection Mechanism Failure Vulnerability", "description": "Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.", "date_added": "2026-04-28", "due_date": "2026-05-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-693" ], "epss": 0.04902, "epss_percentile": 0.92002, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-32202", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32202" } ] }, { "cve": "CVE-2025-29635", "vendor": "D-Link", "product": "DIR-823X", "name": "D-Link DIR-823X Command Injection Vulnerability", "description": "D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2026-04-24", "due_date": "2026-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-77" ], "epss": 0.87944, "epss_percentile": 0.99766, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "d-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-29635", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29635" } ] }, { "cve": "CVE-2026-20122", "vendor": "Cisco", "product": "Catalyst SD-WAN Manger", "name": "Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability", "description": "Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.", "date_added": "2026-04-20", "due_date": "2026-04-23", "required_action": "Please adhere to CISA\u2019s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA\u2019s Emergency Directive 26-03 (URL listed below in Notes) and CISA\u2019s \u201cHunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": false, "cwes": [ "CWE-648" ], "epss": 0.25476, "epss_percentile": 0.97937, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "catalyst", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20122" } ] }, { "cve": "CVE-2026-20133", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability", "description": "Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that could allow remote attackers to view sensitive information on affected systems.", "date_added": "2026-04-20", "due_date": "2026-04-23", "required_action": "Please adhere to CISA\u2019s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA\u2019s Emergency Directive 26-03 (URL listed below in Notes) and CISA\u2019s \u201cHunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": false, "cwes": [ "CWE-200" ], "epss": 0.32432, "epss_percentile": 0.98325, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "catalyst", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20133", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20133" } ] }, { "cve": "CVE-2025-48700", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information.", "date_added": "2026-04-20", "due_date": "2026-04-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-79" ], "epss": 0.01713, "epss_percentile": 0.77035, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-48700", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48700" } ] }, { "cve": "CVE-2026-20128", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability", "description": "Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.", "date_added": "2026-04-20", "due_date": "2026-04-23", "required_action": "Please adhere to CISA\u2019s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA\u2019s Emergency Directive 26-03 (URL listed below in Notes) and CISA\u2019s \u201cHunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": false, "cwes": [ "CWE-257" ], "epss": 0.07217, "epss_percentile": 0.94262, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "catalyst", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20128", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20128" } ] }, { "cve": "CVE-2024-27199", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Relative Path Traversal Vulnerability", "description": "JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.", "date_added": "2026-04-20", "due_date": "2026-05-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-23" ], "epss": 0.99991, "epss_percentile": 0.99986, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "jetbrains teamcity", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-27199", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27199" } ] }, { "cve": "CVE-2009-0238", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Remote Code Execution", "description": "Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.", "date_added": "2026-04-14", "due_date": "2026-04-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-94" ], "epss": 0.42941, "epss_percentile": 0.9871, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2009-0238", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0238" } ] }, { "cve": "CVE-2026-32201", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Improper Input Validation Vulnerability", "description": "Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.", "date_added": "2026-04-14", "due_date": "2026-04-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-20" ], "epss": 0.43378, "epss_percentile": 0.98722, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-32201", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32201" } ] }, { "cve": "CVE-2025-60710", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Link Following Vulnerability", "description": "Microsoft Windows contains a link following vulnerability that allows for privilege escalation", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-59" ], "epss": 0.04614, "epss_percentile": 0.91585, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-60710", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-60710" } ] }, { "cve": "CVE-2023-21529", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability", "description": "Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.59294, "epss_percentile": 0.99113, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-21529", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21529" } ] }, { "cve": "CVE-2023-36424", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Out-of-Bounds Read Vulnerability", "description": "Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-125" ], "epss": 0.12087, "epss_percentile": 0.96113, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-36424", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36424" } ] }, { "cve": "CVE-2020-9715", "vendor": "Adobe", "product": "Acrobat", "name": "Adobe Acrobat Use-After-Free Vulnerability", "description": "Adobe Acrobat contains a use-after-free vulnerability that allows for code execution", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.33491, "epss_percentile": 0.9837, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-9715", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9715" } ] }, { "cve": "CVE-2026-21643", "vendor": "Fortinet", "product": "FortiClient EMS", "name": "Fortinet FortiClient EMS SQL Injection Vulnerability", "description": "Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.", "date_added": "2026-04-13", "due_date": "2026-04-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-89" ], "epss": 0.93871, "epss_percentile": 0.99845, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21643", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21643" } ] }, { "cve": "CVE-2026-34621", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Prototype Pollution Vulnerability", "description": "Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-1321" ], "epss": 0.02183, "epss_percentile": 0.82104, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-34621", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34621" } ] }, { "cve": "CVE-2026-1340", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "description": "Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution.", "date_added": "2026-04-08", "due_date": "2026-04-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-94" ], "epss": 0.98639, "epss_percentile": 0.99924, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-1340", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1340" } ] }, { "cve": "CVE-2026-35616", "vendor": "Fortinet", "product": "FortiClient EMS", "name": "Fortinet FortiClient EMS Improper Access Control Vulnerability", "description": "Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.", "date_added": "2026-04-06", "due_date": "2026-04-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-284" ], "epss": 0.09098, "epss_percentile": 0.95264, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-35616", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35616" } ] }, { "cve": "CVE-2026-5281", "vendor": "Google", "product": "Dawn", "name": "Google Dawn Use-After-Free Vulnerability", "description": "Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. This vulnerability could affect multiple Chromium-based products including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2026-04-01", "due_date": "2026-04-15", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.00703, "epss_percentile": 0.52418, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "google", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-5281", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5281" } ] }, { "cve": "CVE-2026-3055", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Out-of-Bounds Read Vulnerability", "description": "Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.", "date_added": "2026-03-30", "due_date": "2026-04-02", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-125" ], "epss": 0.04042, "epss_percentile": 0.90512, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-3055", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3055" } ] }, { "cve": "CVE-2025-53521", "vendor": "F5", "product": "BIG-IP", "name": "F5 BIG-IP Stack-Based Buffer Overflow Vulnerability", "description": "F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution.", "date_added": "2026-03-27", "due_date": "2026-03-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-121" ], "epss": 0.02295, "epss_percentile": 0.83004, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "f5", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-53521", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53521" } ] }, { "cve": "CVE-2025-43510", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Improper Locking Vulnerability", "description": "Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-667" ], "epss": 0.00355, "epss_percentile": 0.27784, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-43510", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43510" } ] }, { "cve": "CVE-2025-43520", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "description": "Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-120" ], "epss": 0.00425, "epss_percentile": 0.35411, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-43520", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43520" } ] }, { "cve": "CVE-2025-31277", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Buffer Overflow Vulnerability", "description": "Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.01658, "epss_percentile": 0.76287, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-31277", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31277" } ] }, { "cve": "CVE-2026-20131", "vendor": "Cisco", "product": "Secure Firewall Management Center (FMC)", "name": "Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability", "description": "Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.", "date_added": "2026-03-19", "due_date": "2026-03-22", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.43166, "epss_percentile": 0.98714, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "cisco secure", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20131", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20131" } ] }, { "cve": "CVE-2025-66376", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading Style Sheets (CSS) @import directives in email HTML.", "date_added": "2026-03-18", "due_date": "2026-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-79" ], "epss": 0.20227, "epss_percentile": 0.97444, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-66376", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66376" } ] }, { "cve": "CVE-2026-20963", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "description": "Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.", "date_added": "2026-03-18", "due_date": "2026-03-21", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-502" ], "epss": 0.29201, "epss_percentile": 0.9816, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20963", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20963" } ] }, { "cve": "CVE-2026-3910", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability", "description": "Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2026-03-13", "due_date": "2026-03-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.01066, "epss_percentile": 0.64231, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-3910", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3910" } ] }, { "cve": "CVE-2026-3909", "vendor": "Google", "product": "Skia", "name": "Google Skia Out-of-Bounds Write Vulnerability", "description": "Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.", "date_added": "2026-03-13", "due_date": "2026-03-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.02342, "epss_percentile": 0.83383, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "google", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-3909", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3909" } ] }, { "cve": "CVE-2026-1603", "vendor": "Ivanti", "product": " Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability", "description": "Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticated attacker to leak specific stored credential data.", "date_added": "2026-03-09", "due_date": "2026-03-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-288" ], "epss": 0.88335, "epss_percentile": 0.99772, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-1603", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1603" } ] }, { "cve": "CVE-2023-43000", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple products Use-After-Free Vulnerability", "description": "Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.04042, "epss_percentile": 0.9051, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-43000", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43000" } ] }, { "cve": "CVE-2021-30952", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Integer Overflow or Wraparound Vulnerability", "description": "Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-190" ], "epss": 0.06964, "epss_percentile": 0.94067, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-30952", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30952" } ] }, { "cve": "CVE-2023-41974", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Use-After-Free Vulnerability", "description": "Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.01955, "epss_percentile": 0.79969, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-41974", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41974" } ] }, { "cve": "CVE-2026-22719", "vendor": "Broadcom", "product": "VMware Aria Operations", "name": "Broadcom VMware Aria Operations Command Injection Vulnerability", "description": "Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support\u2011assisted product migration.", "date_added": "2026-03-03", "due_date": "2026-03-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-77" ], "epss": 0.18081, "epss_percentile": 0.97175, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-22719", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22719" } ] }, { "cve": "CVE-2026-20127", "vendor": "Cisco", "product": "Catalyst SD-WAN Controller and Manager", "name": "Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability", "description": "Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authentication bypass vulnerability could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.", "date_added": "2026-02-25", "due_date": "2026-02-27", "required_action": "Please adhere to CISA\u2019s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA\u2019s Emergency Directive 26-03 (URL listed below in Notes) and CISA\u2019s \u201cHunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": false, "cwes": [ "CWE-287" ], "epss": 0.88476, "epss_percentile": 0.99773, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "catalyst", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20127", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20127" } ] }, { "cve": "CVE-2021-22175", "vendor": "GitLab", "product": "GitLab", "name": "GitLab Server-Side Request Forgery (SSRF) Vulnerability", "description": "GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled.", "date_added": "2026-02-18", "due_date": "2026-03-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-918" ], "epss": 0.53372, "epss_percentile": 0.9898, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "gitlab", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-22175", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22175" } ] }, { "cve": "CVE-2020-7796", "vendor": "Synacor", "product": "Zimbra Collaboration Suite", "name": "Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is enabled.", "date_added": "2026-02-17", "due_date": "2026-03-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-918" ], "epss": 0.84418, "epss_percentile": 0.997, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-7796", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7796" } ] }, { "cve": "CVE-2008-0015", "vendor": "Microsoft", "product": "Windows", "name": " Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability", "description": "Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.", "date_added": "2026-02-17", "due_date": "2026-03-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.76576, "epss_percentile": 0.9954, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2008-0015", "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0015" } ] }, { "cve": "CVE-2026-2441", "vendor": "Google", "product": "Chromium", "name": "Google Chromium CSS Use-After-Free Vulnerability", "description": "Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2026-02-17", "due_date": "2026-03-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.54957, "epss_percentile": 0.9902, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-2441", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2441" } ] }, { "cve": "CVE-2026-20700", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Buffer Overflow Vulnerability", "description": "Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.", "date_added": "2026-02-12", "due_date": "2026-03-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.01392, "epss_percentile": 0.71932, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20700", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20700" } ] }, { "cve": "CVE-2026-21513", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability", "description": "Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network.", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-693" ], "epss": 0.15852, "epss_percentile": 0.96856, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21513" } ] }, { "cve": "CVE-2026-21525", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NULL Pointer Dereference Vulnerability", "description": "Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally.", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-476" ], "epss": 0.04825, "epss_percentile": 0.91885, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21525", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21525" } ] }, { "cve": "CVE-2026-21510", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Shell Protection Mechanism Failure Vulnerability", "description": "Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network. ", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-693" ], "epss": 0.24537, "epss_percentile": 0.97866, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21510", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21510" } ] }, { "cve": "CVE-2026-21533", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Improper Privilege Management Vulnerability", "description": "Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally.", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-269" ], "epss": 0.04148, "epss_percentile": 0.90742, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21533", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21533" } ] }, { "cve": "CVE-2026-21519", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Type Confusion Vulnerability", "description": "Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges locally.", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-843" ], "epss": 0.02477, "epss_percentile": 0.84321, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21519", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21519" } ] }, { "cve": "CVE-2026-21514", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability", "description": "Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-807" ], "epss": 0.01587, "epss_percentile": 0.7524, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21514", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21514" } ] }, { "cve": "CVE-2021-39935", "vendor": "GitLab", "product": "Community and Enterprise Editions", "name": "GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability", "description": "GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API. ", "date_added": "2026-02-03", "due_date": "2026-02-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-918" ], "epss": 0.3614, "epss_percentile": 0.98467, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "gitlab", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-39935", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39935" } ] }, { "cve": "CVE-2026-1281", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "description": "Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution.", "date_added": "2026-01-29", "due_date": "2026-02-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-94" ], "epss": 0.98688, "epss_percentile": 0.99925, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-1281", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1281" } ] }, { "cve": "CVE-2026-24858", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "description": "Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.", "date_added": "2026-01-27", "due_date": "2026-01-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-288" ], "epss": 0.85796, "epss_percentile": 0.99728, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-24858", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24858" } ] }, { "cve": "CVE-2018-14634", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Integer Overflow Vulnerability", "description": "Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.", "date_added": "2026-01-26", "due_date": "2026-02-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-190" ], "epss": 0.14689, "epss_percentile": 0.96645, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-14634", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14634" } ] }, { "cve": "CVE-2026-21509", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Security Feature Bypass Vulnerability", "description": "Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.", "date_added": "2026-01-26", "due_date": "2026-02-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-807" ], "epss": 0.70795, "epss_percentile": 0.99396, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-21509", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21509" } ] }, { "cve": "CVE-2024-37079", "vendor": "Broadcom", "product": "VMware vCenter Server", "name": "Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability", "description": "Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution.", "date_added": "2026-01-23", "due_date": "2026-02-13", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.22377, "epss_percentile": 0.97676, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-37079", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37079" } ] }, { "cve": "CVE-2025-68645", "vendor": "Synacor", "product": " Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.", "date_added": "2026-01-22", "due_date": "2026-02-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-98" ], "epss": 0.48873, "epss_percentile": 0.98867, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-68645", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68645" } ] }, { "cve": "CVE-2026-20805", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Information Disclosure Vulnerability", "description": "Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.", "date_added": "2026-01-13", "due_date": "2026-02-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-200" ], "epss": 0.07463, "epss_percentile": 0.94412, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2026-20805", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20805" } ] }, { "cve": "CVE-2009-0556", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office PowerPoint Code Injection Vulnerability", "description": "Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.", "date_added": "2026-01-07", "due_date": "2026-01-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-94" ], "epss": 0.67312, "epss_percentile": 0.99302, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2009-0556", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0556" } ] }, { "cve": "CVE-2025-14733", "vendor": "WatchGuard", "product": "Firebox", "name": "WatchGuard Firebox Out of Bounds Write Vulnerability", "description": "WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.", "date_added": "2025-12-19", "due_date": "2025-12-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.2651, "epss_percentile": 0.97999, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "watchguard", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-14733", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14733" } ] }, { "cve": "CVE-2025-40602", "vendor": "SonicWall", "product": "SMA1000 appliance", "name": "SonicWall SMA1000 Missing Authorization Vulnerability", "description": "SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.", "date_added": "2025-12-17", "due_date": "2025-12-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable", "known_ransomware": false, "cwes": [ "CWE-862", "CWE-250" ], "epss": 0.02756, "epss_percentile": 0.86044, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-40602", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40602" } ] }, { "cve": "CVE-2025-59718", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability", "description": "Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ensure to apply all patches mentioned in the advisory.", "date_added": "2025-12-16", "due_date": "2025-12-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-347" ], "epss": 0.68293, "epss_percentile": 0.99328, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-59718", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59718" } ] }, { "cve": "CVE-2025-43529", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Use-After-Free WebKit Vulnerability", "description": "Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "date_added": "2025-12-15", "due_date": "2026-01-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.08763, "epss_percentile": 0.95126, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-43529", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43529" } ] }, { "cve": "CVE-2025-14174", "vendor": "Google", "product": "Chromium", "name": "Google Chromium Out of Bounds Memory Access Vulnerability", "description": "Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2025-12-12", "due_date": "2026-01-02", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.22327, "epss_percentile": 0.97669, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-14174", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14174" } ] }, { "cve": "CVE-2025-62221", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Use After Free Vulnerability", "description": "Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally.", "date_added": "2025-12-09", "due_date": "2025-12-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.02505, "epss_percentile": 0.84498, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-62221", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62221" } ] }, { "cve": "CVE-2022-37055", "vendor": "D-Link", "product": "Routers", "name": "D-Link Routers Buffer Overflow Vulnerability", "description": "D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-12-08", "due_date": "2025-12-29", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-120" ], "epss": 0.55531, "epss_percentile": 0.99031, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "d-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-37055", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37055" } ] }, { "cve": "CVE-2025-48633", "vendor": "Android", "product": "Framework", "name": "Android Framework Information Disclosure Vulnerability", "description": "Android Framework contains an unspecified vulnerability that allows for information disclosure.", "date_added": "2025-12-02", "due_date": "2025-12-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.00262, "epss_percentile": 0.16904, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "android", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-48633", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48633" } ] }, { "cve": "CVE-2025-48572", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "description": "Android Framework contains an unspecified vulnerability that allows for privilege escalation.", "date_added": "2025-12-02", "due_date": "2025-12-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.00259, "epss_percentile": 0.16517, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "android", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-48572", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48572" } ] }, { "cve": "CVE-2025-61757", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability", "description": "Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.", "date_added": "2025-11-21", "due_date": "2025-12-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-306" ], "epss": 0.88647, "epss_percentile": 0.99776, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-61757", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61757" } ] }, { "cve": "CVE-2025-13223", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "description": "Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.", "date_added": "2025-11-19", "due_date": "2025-12-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-843" ], "epss": 0.049, "epss_percentile": 0.91997, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-13223", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13223" } ] }, { "cve": "CVE-2025-58034", "vendor": "Fortinet", "product": "FortiWeb", "name": "Fortinet FortiWeb OS Command Injection Vulnerability", "description": "Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.", "date_added": "2025-11-18", "due_date": "2025-11-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.54724, "epss_percentile": 0.99015, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-58034", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58034" } ] }, { "cve": "CVE-2025-64446", "vendor": "Fortinet", "product": "FortiWeb", "name": "Fortinet FortiWeb Path Traversal Vulnerability", "description": "Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.", "date_added": "2025-11-14", "due_date": "2025-11-21", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-23" ], "epss": 0.91965, "epss_percentile": 0.9982, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-64446", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64446" } ] }, { "cve": "CVE-2025-62215", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Race Condition Vulnerability", "description": "Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access.", "date_added": "2025-11-12", "due_date": "2025-12-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-362" ], "epss": 0.04464, "epss_percentile": 0.91336, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-62215", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62215" } ] }, { "cve": "CVE-2025-9242", "vendor": "WatchGuard", "product": "Firebox", "name": "WatchGuard Firebox Out-of-Bounds Write Vulnerability", "description": "WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code.", "date_added": "2025-11-12", "due_date": "2025-12-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.91804, "epss_percentile": 0.99817, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "watchguard", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-9242", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9242" } ] }, { "cve": "CVE-2025-41244", "vendor": "Broadcom", "product": "VMware Aria Operations and VMware Tools", "name": "Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability", "description": "Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.", "date_added": "2025-10-30", "due_date": "2025-11-20", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-267" ], "epss": 0.08629, "epss_percentile": 0.95059, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-41244", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41244" } ] }, { "cve": "CVE-2025-54236", "vendor": "Adobe", "product": "Commerce and\u202fMagento", "name": "Adobe Commerce and\u202fMagento Improper Input Validation Vulnerability", "description": "Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.", "date_added": "2025-10-24", "due_date": "2025-11-14", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-20" ], "epss": 0.9466, "epss_percentile": 0.99858, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-54236", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-54236" } ] }, { "cve": "CVE-2025-59287", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability", "description": "Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.", "date_added": "2025-10-24", "due_date": "2025-11-14", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-502" ], "epss": 0.9998, "epss_percentile": 0.99981, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-59287", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59287" } ] }, { "cve": "CVE-2022-48503", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Unspecified Vulnerability", "description": "Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.03213, "epss_percentile": 0.88012, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-48503", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48503" } ] }, { "cve": "CVE-2025-33073", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SMB Client Improper Access Control Vulnerability", "description": "Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-284" ], "epss": 0.82699, "epss_percentile": 0.99666, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-33073", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33073" } ] }, { "cve": "CVE-2025-61884", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability", "description": "Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-918" ], "epss": 0.95891, "epss_percentile": 0.99875, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-61884", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61884" } ] }, { "cve": "CVE-2025-54253", "vendor": "Adobe", "product": "Experience Manager (AEM) Forms", "name": "Adobe Experience Manager Forms Code Execution Vulnerability", "description": "Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.", "date_added": "2025-10-15", "due_date": "2025-11-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.88262, "epss_percentile": 0.99771, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-54253", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-54253" } ] }, { "cve": "CVE-2025-24990", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Untrusted Pointer Dereference Vulnerability", "description": "Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.", "date_added": "2025-10-14", "due_date": "2025-11-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-822" ], "epss": 0.06369, "epss_percentile": 0.93588, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24990", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24990" } ] }, { "cve": "CVE-2025-59230", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Improper Access Control Vulnerability", "description": "Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.", "date_added": "2025-10-14", "due_date": "2025-11-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-284" ], "epss": 0.02657, "epss_percentile": 0.85461, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-59230", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59230" } ] }, { "cve": "CVE-2025-27915", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its embedded JavaScript executes via an ontoggle event inside a tag. This allows an attacker to run arbitrary JavaScript within the victim's session, potentially leading to unauthorized actions such as setting e-mail filters to redirect messages to an attacker-controlled address. As a result, an attacker can perform unauthorized actions on the victim's account, including e-mail redirection and data exfiltration.", "date_added": "2025-10-07", "due_date": "2025-10-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-79" ], "epss": 0.04064, "epss_percentile": 0.90555, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-27915", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27915" } ] }, { "cve": "CVE-2021-22555", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Heap Out-of-Bounds Write Vulnerability", "description": "Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.78684, "epss_percentile": 0.99587, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-22555", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22555" } ] }, { "cve": "CVE-2010-3962", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability", "description": "Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.96831, "epss_percentile": 0.99889, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2010-3962", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3962" } ] }, { "cve": "CVE-2021-43226", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "description": "Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [], "epss": 0.03275, "epss_percentile": 0.88267, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-43226", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43226" } ] }, { "cve": "CVE-2013-3918", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Out-of-Bounds Write Vulnerability", "description": "Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.73693, "epss_percentile": 0.99473, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2013-3918", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3918" } ] }, { "cve": "CVE-2011-3402", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Remote Code Execution Vulnerability", "description": "Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.78138, "epss_percentile": 0.99576, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2011-3402", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3402" } ] }, { "cve": "CVE-2010-3765", "vendor": "Mozilla", "product": "Multiple Products", "name": "Mozilla Multiple Products Remote Code Execution Vulnerability", "description": "Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.83156, "epss_percentile": 0.99676, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "mozilla", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2010-3765", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3765" } ] }, { "cve": "CVE-2025-61882", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Unspecified Vulnerability", "description": "Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [], "epss": 0.99732, "epss_percentile": 0.99953, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-61882", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61882" } ] }, { "cve": "CVE-2017-1000353", "vendor": "Jenkins", "product": "Jenkins", "name": "Jenkins Remote Code Execution Vulnerability", "description": "Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.", "date_added": "2025-10-02", "due_date": "2025-10-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.99679, "epss_percentile": 0.99951, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "jenkins", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-1000353", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000353" } ] }, { "cve": "CVE-2025-20352", "vendor": "Cisco", "product": "IOS and IOS XE", "name": "Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability", "description": "Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.", "date_added": "2025-09-29", "due_date": "2025-10-20", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-121" ], "epss": 0.41502, "epss_percentile": 0.98667, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ios xe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-20352", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20352" } ] }, { "cve": "CVE-2025-20362", "vendor": "Cisco", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "name": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability", "description": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.", "date_added": "2025-09-25", "due_date": "2025-09-26", "required_action": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor\u2019s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": false, "cwes": [ "CWE-862" ], "epss": 0.87085, "epss_percentile": 0.99751, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "adaptive security", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-20362", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20362" } ] }, { "cve": "CVE-2025-20333", "vendor": "Cisco", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability", "description": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.", "date_added": "2025-09-25", "due_date": "2025-09-26", "required_action": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor\u2019s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": false, "cwes": [ "CWE-120" ], "epss": 0.71207, "epss_percentile": 0.99406, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "adaptive security", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-20333", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20333" } ] }, { "cve": "CVE-2025-10585", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "description": "Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.", "date_added": "2025-09-23", "due_date": "2025-10-14", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-843" ], "epss": 0.05391, "epss_percentile": 0.92593, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-10585", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10585" } ] }, { "cve": "CVE-2025-38352", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability", "description": "Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.", "date_added": "2025-09-04", "due_date": "2025-09-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-367" ], "epss": 0.01341, "epss_percentile": 0.70912, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-38352", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-38352" } ] }, { "cve": "CVE-2025-48543", "vendor": "Android", "product": "Runtime", "name": "Android Runtime Use-After-Free Vulnerability", "description": "Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.", "date_added": "2025-09-04", "due_date": "2025-09-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.00634, "epss_percentile": 0.49425, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "android", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-48543", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48543" } ] }, { "cve": "CVE-2023-50224", "vendor": "TP-Link", "product": "TL-WR841N", "name": "TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability", "description": "TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-09-03", "due_date": "2025-09-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-290" ], "epss": 0.20021, "epss_percentile": 0.97418, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "tp-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-50224", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50224" } ] }, { "cve": "CVE-2025-9377", "vendor": "TP-Link", "product": "Multiple Routers", "name": "TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability", "description": "TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-09-03", "due_date": "2025-09-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.37731, "epss_percentile": 0.98532, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "tp-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-9377", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9377" } ] }, { "cve": "CVE-2020-24363", "vendor": "TP-Link", "product": "TL-WA855RE", "name": "TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability", "description": "TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-09-02", "due_date": "2025-09-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-306" ], "epss": 0.22187, "epss_percentile": 0.97657, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "tp-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-24363", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-24363" } ] }, { "cve": "CVE-2025-7775", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Memory Overflow Vulnerability", "description": "Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.", "date_added": "2025-08-26", "due_date": "2025-08-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.20284, "epss_percentile": 0.97452, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-7775", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7775" } ] }, { "cve": "CVE-2024-8068", "vendor": "Citrix", "product": "Session Recording", "name": "Citrix Session Recording Improper Privilege Management Vulnerability", "description": "Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.", "date_added": "2025-08-25", "due_date": "2025-09-15", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-269" ], "epss": 0.03481, "epss_percentile": 0.88964, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "citrix", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-8068", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8068" } ] }, { "cve": "CVE-2024-8069", "vendor": "Citrix", "product": "Session Recording", "name": "Citrix Session Recording Deserialization of Untrusted Data Vulnerability", "description": "Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.", "date_added": "2025-08-25", "due_date": "2025-09-15", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-502" ], "epss": 0.14643, "epss_percentile": 0.96635, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "citrix", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-8069", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8069" } ] }, { "cve": "CVE-2025-43300", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "description": "Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.", "date_added": "2025-08-21", "due_date": "2025-09-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.32498, "epss_percentile": 0.98329, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-43300", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43300" } ] }, { "cve": "CVE-2007-0671", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Excel Remote Code Execution Vulnerability", "description": "Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.", "date_added": "2025-08-12", "due_date": "2025-09-02", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.43241, "epss_percentile": 0.98716, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2007-0671", "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0671" } ] }, { "cve": "CVE-2013-3893", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Resource Management Errors Vulnerability", "description": "Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-08-12", "due_date": "2025-09-02", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-399" ], "epss": 0.87526, "epss_percentile": 0.99759, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2013-3893", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3893" } ] }, { "cve": "CVE-2020-25078", "vendor": "D-Link", "product": "DCS-2530L and DCS-2670L Devices", "name": "D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability", "description": "D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-08-05", "due_date": "2025-08-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.97511, "epss_percentile": 0.99902, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "d-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-25078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25078" } ] }, { "cve": "CVE-2020-25079", "vendor": "D-Link", "product": "DCS-2530L and DCS-2670L Devices", "name": "D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability", "description": "D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-08-05", "due_date": "2025-08-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-77" ], "epss": 0.54007, "epss_percentile": 0.98997, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "d-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-25079", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25079" } ] }, { "cve": "CVE-2022-40799", "vendor": "D-Link", "product": "DNR-322L", "name": "D-Link DNR-322L Download of Code Without Integrity Check Vulnerability", "description": "D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-08-05", "due_date": "2025-08-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-494" ], "epss": 0.3365, "epss_percentile": 0.98376, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "d-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-40799", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40799" } ] }, { "cve": "CVE-2025-6558", "vendor": "Google", "product": "Chromium", "name": "Google Chromium ANGLE and GPU Improper Input Validation Vulnerability", "description": "Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2025-07-22", "due_date": "2025-08-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-20" ], "epss": 0.10927, "epss_percentile": 0.95847, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-6558", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6558" } ] }, { "cve": "CVE-2025-49704", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Code Injection Vulnerability", "description": "Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.", "date_added": "2025-07-22", "due_date": "2025-07-23", "required_action": "Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": true, "cwes": [ "CWE-94" ], "epss": 0.99995, "epss_percentile": 0.99988, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-49704", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49704" } ] }, { "cve": "CVE-2025-49706", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Improper Authentication Vulnerability", "description": "Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706.", "date_added": "2025-07-22", "due_date": "2025-07-23", "required_action": "Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.99095, "epss_percentile": 0.99934, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-49706", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49706" } ] }, { "cve": "CVE-2025-53770", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "description": "Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.", "date_added": "2025-07-20", "due_date": "2025-07-21", "required_action": "Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.99999, "epss_percentile": 0.99991, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-53770", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53770" } ] }, { "cve": "CVE-2025-25257", "vendor": "Fortinet", "product": "FortiWeb", "name": "Fortinet FortiWeb SQL Injection Vulnerability", "description": "Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.", "date_added": "2025-07-18", "due_date": "2025-08-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-89" ], "epss": 0.99921, "epss_percentile": 0.99969, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-25257", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25257" } ] }, { "cve": "CVE-2025-5777", "vendor": "Citrix", "product": "NetScaler ADC and Gateway", "name": "Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability", "description": "Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.", "date_added": "2025-07-10", "due_date": "2025-07-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-125" ], "epss": 0.99972, "epss_percentile": 0.99979, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-5777", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5777" } ] }, { "cve": "CVE-2019-9621", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component.", "date_added": "2025-07-07", "due_date": "2025-07-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-918", "CWE-807" ], "epss": 0.81037, "epss_percentile": 0.99631, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-9621", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9621" } ] }, { "cve": "CVE-2016-10033", "vendor": "PHP", "product": "PHPMailer", "name": "PHPMailer Command Injection Vulnerability", "description": "PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.", "date_added": "2025-07-07", "due_date": "2025-07-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-77", "CWE-88" ], "epss": 0.99714, "epss_percentile": 0.99952, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "php", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2016-10033", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10033" } ] }, { "cve": "CVE-2025-6554", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "description": "Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2025-07-02", "due_date": "2025-07-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-843" ], "epss": 0.14142, "epss_percentile": 0.96547, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-6554", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6554" } ] }, { "cve": "CVE-2025-6543", "vendor": "Citrix", "product": "NetScaler ADC and Gateway", "name": "Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability", "description": "Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.", "date_added": "2025-06-30", "due_date": "2025-07-21", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-119" ], "epss": 0.10562, "epss_percentile": 0.95742, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-6543", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6543" } ] }, { "cve": "CVE-2019-6693", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability", "description": "Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key. ", "date_added": "2025-06-25", "due_date": "2025-07-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-798" ], "epss": 0.0664, "epss_percentile": 0.93805, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-6693", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6693" } ] }, { "cve": "CVE-2024-0769", "vendor": "D-Link", "product": "DIR-859 Router", "name": " D-Link DIR-859 Router Path Traversal Vulnerability", "description": "D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation and unauthorized control of the device. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "date_added": "2025-06-25", "due_date": "2025-07-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-22" ], "epss": 0.82714, "epss_percentile": 0.99667, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "d-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-0769", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0769" } ] }, { "cve": "CVE-2023-0386", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Ownership Management Vulnerability", "description": "Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel\u2019s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.", "date_added": "2025-06-17", "due_date": "2025-07-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-282" ], "epss": 0.0788, "epss_percentile": 0.94661, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-0386", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0386" } ] }, { "cve": "CVE-2023-33538", "vendor": "TP-Link", "product": "Multiple Routers", "name": "TP-Link Multiple Routers Command Injection Vulnerability", "description": "TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "date_added": "2025-06-16", "due_date": "2025-07-07", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-77" ], "epss": 0.41606, "epss_percentile": 0.9867, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "tp-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-33538", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33538" } ] }, { "cve": "CVE-2025-43200", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Unspecified Vulnerability", "description": "Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.", "date_added": "2025-06-16", "due_date": "2025-07-07", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.01191, "epss_percentile": 0.67501, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-43200", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43200" } ] }, { "cve": "CVE-2025-33053", "vendor": "Microsoft", "product": "Windows", "name": " Microsoft Windows External Control of File Name or Path Vulnerability", "description": "Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.", "date_added": "2025-06-10", "due_date": "2025-07-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-73" ], "epss": 0.87015, "epss_percentile": 0.99749, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-33053", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33053" } ] }, { "cve": "CVE-2025-5419", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "description": "Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2025-06-05", "due_date": "2025-06-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-125", "CWE-787" ], "epss": 0.07821, "epss_percentile": 0.94623, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-5419", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5419" } ] }, { "cve": "CVE-2024-27443", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "description": "Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message containing a crafted calendar header, leading to the execution of arbitrary JavaScript code.", "date_added": "2025-05-19", "due_date": "2025-06-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-79" ], "epss": 0.24606, "epss_percentile": 0.97869, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-27443", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27443" } ] }, { "cve": "CVE-2025-4428", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "description": "Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source library, as represented by CVE-2025-35036.", "date_added": "2025-05-19", "due_date": "2025-06-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-94" ], "epss": 0.86984, "epss_percentile": 0.99749, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-4428", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4428" } ] }, { "cve": "CVE-2025-4427", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability", "description": "Ivanti Endpoint Manager Mobile (EPMM) contains an authentication bypass vulnerability in the API component that allows an attacker to access protected resources without proper credentials via crafted API requests. This vulnerability results from an insecure implementation of the Spring Framework open-source library.", "date_added": "2025-05-19", "due_date": "2025-06-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-288" ], "epss": 0.99924, "epss_percentile": 0.9997, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-4427", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4427" } ] }, { "cve": "CVE-2025-42999", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Deserialization Vulnerability", "description": "SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content.", "date_added": "2025-05-15", "due_date": "2025-06-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.12743, "epss_percentile": 0.9624, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-42999", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-42999" } ] }, { "cve": "CVE-2024-12987", "vendor": "DrayTek", "product": "Vigor Routers", "name": "DrayTek Vigor Routers OS Command Injection Vulnerability", "description": "DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability due to an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component web management interface.", "date_added": "2025-05-15", "due_date": "2025-06-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.98163, "epss_percentile": 0.99914, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "draytek vigor", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-12987", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12987" } ] }, { "cve": "CVE-2025-32756", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability", "description": "Fortinet FortiFone, FortiVoice, FortiNDR and FortiMail contain a stack-based overflow vulnerability that may allow a remote unauthenticated attacker to execute arbitrary code or commands via crafted HTTP requests.", "date_added": "2025-05-14", "due_date": "2025-06-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-124" ], "epss": 0.30703, "epss_percentile": 0.98236, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-32756", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32756" } ] }, { "cve": "CVE-2025-32709", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability", "description": "Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.01818, "epss_percentile": 0.78402, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-32709", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32709" } ] }, { "cve": "CVE-2025-30397", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Scripting Engine Type Confusion Vulnerability", "description": "Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-843" ], "epss": 0.27044, "epss_percentile": 0.98031, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-30397", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30397" } ] }, { "cve": "CVE-2025-32706", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability", "description": "Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-122" ], "epss": 0.02333, "epss_percentile": 0.83307, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-32706", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32706" } ] }, { "cve": "CVE-2025-32701", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability", "description": "Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.01416, "epss_percentile": 0.72358, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-32701", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32701" } ] }, { "cve": "CVE-2025-30400", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows DWM Core Library Use-After-Free Vulnerability", "description": "Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.01917, "epss_percentile": 0.7956, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-30400", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30400" } ] }, { "cve": "CVE-2024-38475", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Improper Escaping of Output Vulnerability", "description": "Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure.", "date_added": "2025-05-01", "due_date": "2025-05-22", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-116" ], "epss": 0.99957, "epss_percentile": 0.99975, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apache http", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-38475", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38475" } ] }, { "cve": "CVE-2023-44221", "vendor": "SonicWall", "product": "SMA100 Appliances", "name": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "description": "SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user.", "date_added": "2025-05-01", "due_date": "2025-05-22", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.7625, "epss_percentile": 0.99534, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-44221", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44221" } ] }, { "cve": "CVE-2025-31324", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Unrestricted File Upload Vulnerability", "description": "SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.", "date_added": "2025-04-29", "due_date": "2025-05-20", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-434" ], "epss": 0.99486, "epss_percentile": 0.99945, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-31324", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31324" } ] }, { "cve": "CVE-2025-24054", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability", "description": "Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-73" ], "epss": 0.6227, "epss_percentile": 0.99178, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24054", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24054" } ] }, { "cve": "CVE-2025-31201", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Arbitrary Read and Write Vulnerability", "description": "Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.13863, "epss_percentile": 0.96499, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-31201", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31201" } ] }, { "cve": "CVE-2025-31200", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "description": "Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.20898, "epss_percentile": 0.97537, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-31200", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31200" } ] }, { "cve": "CVE-2021-20035", "vendor": "SonicWall", "product": "SMA100 Appliances", "name": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "description": "SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.", "date_added": "2025-04-16", "due_date": "2025-05-07", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.04181, "epss_percentile": 0.90809, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-20035", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20035" } ] }, { "cve": "CVE-2024-53150", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Read Vulnerability", "description": "Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information.", "date_added": "2025-04-09", "due_date": "2025-04-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-125" ], "epss": 0.01354, "epss_percentile": 0.71167, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-53150", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53150" } ] }, { "cve": "CVE-2024-53197", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Access Vulnerability", "description": "Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code.", "date_added": "2025-04-09", "due_date": "2025-04-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.04117, "epss_percentile": 0.90672, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-53197", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53197" } ] }, { "cve": "CVE-2025-29824", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability", "description": "Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.", "date_added": "2025-04-08", "due_date": "2025-04-29", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-416" ], "epss": 0.13904, "epss_percentile": 0.96506, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-29824", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29824" } ] }, { "cve": "CVE-2025-22457", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "description": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution. ", "date_added": "2025-04-04", "due_date": "2025-04-11", "required_action": "Apply mitigations as set forth in the CISA instructions linked below.", "known_ransomware": true, "cwes": [ "CWE-121" ], "epss": 0.99981, "epss_percentile": 0.99982, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-22457", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22457" } ] }, { "cve": "CVE-2025-24813", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Path Equivalence Vulnerability", "description": "Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE\u20112026\u201134486.", "date_added": "2025-04-01", "due_date": "2025-04-22", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-44", "CWE-502" ], "epss": 0.99927, "epss_percentile": 0.9997, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "apache tomcat", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24813", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24813" } ] }, { "cve": "CVE-2025-2783", "vendor": "Google", "product": "Chromium Mojo", "name": "Google Chromium Mojo Sandbox Escape Vulnerability", "description": "Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "date_added": "2025-03-27", "due_date": "2025-04-17", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.09238, "epss_percentile": 0.95315, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "chromium", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2783" } ] }, { "cve": "CVE-2017-12637", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Directory Traversal Vulnerability", "description": "SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows a remote attacker to read arbitrary files via a .. (dot dot) in the query string.", "date_added": "2025-03-19", "due_date": "2025-04-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-22" ], "epss": 0.95111, "epss_percentile": 0.99866, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-12637", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12637" } ] }, { "cve": "CVE-2025-24472", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "description": " Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.", "date_added": "2025-03-18", "due_date": "2025-04-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-288" ], "epss": 0.07235, "epss_percentile": 0.94272, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24472", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24472" } ] }, { "cve": "CVE-2025-24201", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability", "description": "Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "date_added": "2025-03-13", "due_date": "2025-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.03847, "epss_percentile": 0.90021, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24201", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24201" } ] }, { "cve": "CVE-2025-24993", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability", "description": "Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-122" ], "epss": 0.02198, "epss_percentile": 0.82224, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24993", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24993" } ] }, { "cve": "CVE-2025-24991", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability", "description": "Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-125" ], "epss": 0.02018, "epss_percentile": 0.80637, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24991", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24991" } ] }, { "cve": "CVE-2025-24985", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability", "description": "Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-190", "CWE-122" ], "epss": 0.0389, "epss_percentile": 0.90128, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24985", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24985" } ] }, { "cve": "CVE-2025-24984", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTFS Information Disclosure Vulnerability", "description": "Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-532" ], "epss": 0.01994, "epss_percentile": 0.804, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24984", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24984" } ] }, { "cve": "CVE-2025-24983", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Win32k Use-After-Free Vulnerability", "description": "Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.01375, "epss_percentile": 0.71607, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24983", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24983" } ] }, { "cve": "CVE-2025-26633", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability", "description": "Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-707" ], "epss": 0.30391, "epss_percentile": 0.98222, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-26633", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26633" } ] }, { "cve": "CVE-2024-13161", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "description": "Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.", "date_added": "2025-03-10", "due_date": "2025-03-31", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-36" ], "epss": 0.90081, "epss_percentile": 0.99796, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-13161", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13161" } ] }, { "cve": "CVE-2024-13160", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "description": "Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.", "date_added": "2025-03-10", "due_date": "2025-03-31", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-36" ], "epss": 0.91247, "epss_percentile": 0.9981, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-13160", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13160" } ] }, { "cve": "CVE-2024-13159", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "description": "Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.", "date_added": "2025-03-10", "due_date": "2025-03-31", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-36" ], "epss": 0.99992, "epss_percentile": 0.99987, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-13159", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13159" } ] }, { "cve": "CVE-2025-22226", "vendor": "VMware", "product": "ESXi, Workstation, and Fusion", "name": "VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability", "description": "VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.", "date_added": "2025-03-04", "due_date": "2025-03-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-125" ], "epss": 0.01769, "epss_percentile": 0.77799, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-22226", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22226" } ] }, { "cve": "CVE-2025-22225", "vendor": "VMware", "product": "ESXi", "name": "VMware ESXi Arbitrary Write Vulnerability", "description": "VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.", "date_added": "2025-03-04", "due_date": "2025-03-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-123" ], "epss": 0.01016, "epss_percentile": 0.62737, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-22225", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22225" } ] }, { "cve": "CVE-2025-22224", "vendor": "VMware", "product": "ESXi and Workstation", "name": "VMware ESXi and Workstation TOCTOU Race Condition Vulnerability", "description": "VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.", "date_added": "2025-03-04", "due_date": "2025-03-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-367" ], "epss": 0.01561, "epss_percentile": 0.74873, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-22224", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22224" } ] }, { "cve": "CVE-2024-50302", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use of Uninitialized Resource Vulnerability", "description": "The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.", "date_added": "2025-03-04", "due_date": "2025-03-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-908" ], "epss": 0.00811, "epss_percentile": 0.56195, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-50302", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50302" } ] }, { "cve": "CVE-2024-4885", "vendor": "Progress", "product": "WhatsUp Gold", "name": "Progress WhatsUp Gold Path Traversal Vulnerability", "description": "Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution.", "date_added": "2025-03-03", "due_date": "2025-03-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-22" ], "epss": 0.99288, "epss_percentile": 0.99938, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "progress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-4885", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4885" } ] }, { "cve": "CVE-2018-8639", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability", "description": "Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.", "date_added": "2025-03-03", "due_date": "2025-03-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-404" ], "epss": 0.22179, "epss_percentile": 0.97656, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-8639", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8639" } ] }, { "cve": "CVE-2023-20118", "vendor": "Cisco", "product": "Small Business RV Series Routers", "name": "Cisco Small Business RV Series Routers Command Injection Vulnerability", "description": "Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.", "date_added": "2025-03-03", "due_date": "2025-03-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-77" ], "epss": 0.54107, "epss_percentile": 0.99, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "cisco small business", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-20118", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20118" } ] }, { "cve": "CVE-2023-34192", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.", "date_added": "2025-02-25", "due_date": "2025-03-18", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-79" ], "epss": 0.77266, "epss_percentile": 0.99554, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-34192", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34192" } ] }, { "cve": "CVE-2024-20953", "vendor": "Oracle", "product": "Agile Product Lifecycle Management (PLM)", "name": "Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability", "description": "Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.", "date_added": "2025-02-24", "due_date": "2025-03-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-502" ], "epss": 0.03934, "epss_percentile": 0.90262, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-20953", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20953" } ] }, { "cve": "CVE-2017-3066", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization Vulnerability", "description": "Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.", "date_added": "2025-02-24", "due_date": "2025-03-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-502" ], "epss": 0.90597, "epss_percentile": 0.99803, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-3066", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3066" } ] }, { "cve": "CVE-2025-0111", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS File Read Vulnerability", "description": "Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the \u201cnobody\u201d user.", "date_added": "2025-02-20", "due_date": "2025-03-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-73" ], "epss": 0.01999, "epss_percentile": 0.80447, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-0111", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0111" } ] }, { "cve": "CVE-2025-0108", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "description": "Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.", "date_added": "2025-02-18", "due_date": "2025-03-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-306" ], "epss": 0.98455, "epss_percentile": 0.9992, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-0108", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0108" } ] }, { "cve": "CVE-2024-53704", "vendor": "SonicWall", "product": "SonicOS", "name": "SonicWall SonicOS SSLVPN Improper Authentication Vulnerability", "description": "SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.", "date_added": "2025-02-18", "due_date": "2025-03-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.95314, "epss_percentile": 0.99868, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-53704", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53704" } ] }, { "cve": "CVE-2025-24200", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Incorrect Authorization Vulnerability", "description": "Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.", "date_added": "2025-02-12", "due_date": "2025-03-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-863" ], "epss": 0.0442, "epss_percentile": 0.91249, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24200", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24200" } ] }, { "cve": "CVE-2025-21418", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability", "description": "Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.", "date_added": "2025-02-11", "due_date": "2025-03-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-122" ], "epss": 0.01568, "epss_percentile": 0.7497, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-21418", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21418" } ] }, { "cve": "CVE-2025-21391", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Storage Link Following Vulnerability", "description": "Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.", "date_added": "2025-02-11", "due_date": "2025-03-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-59" ], "epss": 0.02303, "epss_percentile": 0.83069, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-21391", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21391" } ] }, { "cve": "CVE-2020-15069", "vendor": "Sophos", "product": "XG Firewall", "name": "Sophos XG Firewall Buffer Overflow Vulnerability", "description": "Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the \"HTTP/S bookmark\" feature.", "date_added": "2025-02-06", "due_date": "2025-02-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-120" ], "epss": 0.10674, "epss_percentile": 0.95772, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sophos", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-15069", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15069" } ] }, { "cve": "CVE-2020-29574", "vendor": "Sophos", "product": "CyberoamOS", "name": "CyberoamOS (CROS) SQL Injection Vulnerability", "description": "CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.", "date_added": "2025-02-06", "due_date": "2025-02-27", "required_action": "The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.", "known_ransomware": true, "cwes": [ "CWE-89" ], "epss": 0.04696, "epss_percentile": 0.91698, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sophos", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-29574", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29574" } ] }, { "cve": "CVE-2024-21413", "vendor": "Microsoft", "product": "Office Outlook", "name": "Microsoft Outlook Improper Input Validation Vulnerability", "description": "Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.", "date_added": "2025-02-06", "due_date": "2025-02-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-20" ], "epss": 0.9466, "epss_percentile": 0.99858, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-21413", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21413" } ] }, { "cve": "CVE-2024-53104", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Write Vulnerability", "description": "Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege.", "date_added": "2025-02-05", "due_date": "2025-02-26", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-787" ], "epss": 0.03395, "epss_percentile": 0.88675, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-53104", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53104" } ] }, { "cve": "CVE-2025-24085", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Use-After-Free Vulnerability", "description": "Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.", "date_added": "2025-01-29", "due_date": "2025-02-19", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.1751, "epss_percentile": 0.97112, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-24085", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24085" } ] }, { "cve": "CVE-2025-23006", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Deserialization Vulnerability", "description": "SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.", "date_added": "2025-01-24", "due_date": "2025-02-14", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.23432, "epss_percentile": 0.97774, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-23006", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23006" } ] }, { "cve": "CVE-2025-21335", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability", "description": "Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.", "date_added": "2025-01-14", "due_date": "2025-02-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.0139, "epss_percentile": 0.71903, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-21335", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21335" } ] }, { "cve": "CVE-2025-21334", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability", "description": "Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.", "date_added": "2025-01-14", "due_date": "2025-02-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-416" ], "epss": 0.01561, "epss_percentile": 0.74875, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-21334", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21334" } ] }, { "cve": "CVE-2025-21333", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability", "description": "Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.", "date_added": "2025-01-14", "due_date": "2025-02-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-122" ], "epss": 0.09988, "epss_percentile": 0.95571, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-21333", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21333" } ] }, { "cve": "CVE-2024-55591", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "description": "Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.", "date_added": "2025-01-14", "due_date": "2025-01-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-288" ], "epss": 0.94149, "epss_percentile": 0.99849, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-55591", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55591" } ] }, { "cve": "CVE-2025-0282", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "description": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.", "date_added": "2025-01-08", "due_date": "2025-01-15", "required_action": "Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.", "known_ransomware": true, "cwes": [ "CWE-121" ], "epss": 0.99981, "epss_percentile": 0.99982, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2025-0282", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0282" } ] }, { "cve": "CVE-2020-2883", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "description": "Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3.", "date_added": "2025-01-07", "due_date": "2025-01-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.94582, "epss_percentile": 0.99856, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "weblogic", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-2883", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-2883" } ] }, { "cve": "CVE-2024-3393", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability", "description": "Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.", "date_added": "2024-12-30", "due_date": "2025-01-20", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-754" ], "epss": 0.2912, "epss_percentile": 0.98156, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-3393", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3393" } ] }, { "cve": "CVE-2024-35250", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ", "description": "Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.", "date_added": "2024-12-16", "due_date": "2025-01-06", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-822" ], "epss": 0.25222, "epss_percentile": 0.97922, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-35250", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35250" } ] }, { "cve": "CVE-2024-20767", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Improper Access Control Vulnerability", "description": "Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel.", "date_added": "2024-12-16", "due_date": "2025-01-06", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-284" ], "epss": 0.98514, "epss_percentile": 0.99921, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-20767", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20767" } ] }, { "cve": "CVE-2024-49138", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability", "description": "Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.", "date_added": "2024-12-10", "due_date": "2024-12-31", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-122" ], "epss": 0.26215, "epss_percentile": 0.97985, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-49138", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49138" } ] }, { "cve": "CVE-2024-21287", "vendor": "Oracle", "product": "Agile Product Lifecycle Management (PLM)", "name": "Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability", "description": "Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure.", "date_added": "2024-11-21", "due_date": "2024-12-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-863" ], "epss": 0.01723, "epss_percentile": 0.77155, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-21287", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21287" } ] }, { "cve": "CVE-2024-44309", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability", "description": "Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.", "date_added": "2024-11-21", "due_date": "2024-12-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-79" ], "epss": 0.2259, "epss_percentile": 0.97699, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-44309", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44309" } ] }, { "cve": "CVE-2024-44308", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Code Execution Vulnerability", "description": "Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution.", "date_added": "2024-11-21", "due_date": "2024-12-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.10157, "epss_percentile": 0.9562, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apple", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-44308", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44308" } ] }, { "cve": "CVE-2024-38813", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Privilege Escalation Vulnerability", "description": "VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.", "date_added": "2024-11-20", "due_date": "2024-12-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-250", "CWE-273" ], "epss": 0.17355, "epss_percentile": 0.97093, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-38813", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38813" } ] }, { "cve": "CVE-2024-38812", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Heap-Based Buffer Overflow Vulnerability", "description": "VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.", "date_added": "2024-11-20", "due_date": "2024-12-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-122" ], "epss": 0.54571, "epss_percentile": 0.99011, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-38812", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38812" } ] }, { "cve": "CVE-2024-9474", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability", "description": "Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.", "date_added": "2024-11-18", "due_date": "2024-12-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.", "known_ransomware": true, "cwes": [ "CWE-77" ], "epss": 0.94824, "epss_percentile": 0.99861, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-9474", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9474" } ] }, { "cve": "CVE-2024-0012", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability", "description": "Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.", "date_added": "2024-11-18", "due_date": "2024-12-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.", "known_ransomware": true, "cwes": [ "CWE-306" ], "epss": 0.99855, "epss_percentile": 0.99961, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-0012", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0012" } ] }, { "cve": "CVE-2024-1212", "vendor": "Progress", "product": "Kemp LoadMaster", "name": "Progress Kemp LoadMaster OS Command Injection Vulnerability", "description": "Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.", "date_added": "2024-11-18", "due_date": "2024-12-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.95388, "epss_percentile": 0.99869, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "progress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-1212", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1212" } ] }, { "cve": "CVE-2024-9465", "vendor": "Palo Alto Networks", "product": "Expedition", "name": "Palo Alto Networks Expedition SQL Injection Vulnerability", "description": "Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.", "date_added": "2024-11-14", "due_date": "2024-12-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-89" ], "epss": 0.99626, "epss_percentile": 0.99949, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "palo alto", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-9465", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9465" } ] }, { "cve": "CVE-2024-9463", "vendor": "Palo Alto Networks", "product": "Expedition", "name": "Palo Alto Networks Expedition OS Command Injection Vulnerability", "description": "Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.", "date_added": "2024-11-14", "due_date": "2024-12-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-78" ], "epss": 0.98546, "epss_percentile": 0.99922, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "palo alto", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-9463", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9463" } ] }, { "cve": "CVE-2021-26086", "vendor": "Atlassian", "product": "Jira Server and Data Center", "name": "Atlassian Jira Server and Data Center Path Traversal Vulnerability", "description": "Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint.", "date_added": "2024-11-12", "due_date": "2024-12-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-22" ], "epss": 0.99999, "epss_percentile": 0.99992, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "atlassian", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-26086", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26086" } ] }, { "cve": "CVE-2014-2120", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA)", "name": "Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability", "description": "Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.", "date_added": "2024-11-12", "due_date": "2024-12-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-79" ], "epss": 0.22558, "epss_percentile": 0.97697, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "adaptive security", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2014-2120", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2120" } ] }, { "cve": "CVE-2024-43451", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability", "description": "Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.", "date_added": "2024-11-12", "due_date": "2024-12-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-73" ], "epss": 0.85434, "epss_percentile": 0.99721, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-43451", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43451" } ] }, { "cve": "CVE-2024-49039", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Task Scheduler Privilege Escalation Vulnerability", "description": "Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.", "date_added": "2024-11-12", "due_date": "2024-12-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.14179, "epss_percentile": 0.96554, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-49039", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49039" } ] }, { "cve": "CVE-2024-43093", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "description": "Android Framework contains an unspecified vulnerability that allows for privilege escalation.", "date_added": "2024-11-07", "due_date": "2024-11-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [], "epss": 0.00709, "epss_percentile": 0.52642, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "android", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-43093", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43093" } ] }, { "cve": "CVE-2024-5910", "vendor": "Palo Alto Networks", "product": "Expedition", "name": "Palo Alto Networks Expedition Missing Authentication Vulnerability", "description": "Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.", "date_added": "2024-11-07", "due_date": "2024-11-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": false, "cwes": [ "CWE-306" ], "epss": 0.91684, "epss_percentile": 0.99816, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "palo alto", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-5910", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5910" } ] }, { "cve": "CVE-2024-38094", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization Vulnerability", "description": "Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.", "date_added": "2024-10-22", "due_date": "2024-11-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.50892, "epss_percentile": 0.98919, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-38094", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38094" } ] }, { "cve": "CVE-2024-9680", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Use-After-Free Vulnerability", "description": "Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.", "date_added": "2024-10-15", "due_date": "2024-11-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-416" ], "epss": 0.23184, "epss_percentile": 0.97753, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "mozilla", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-9680", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9680" } ] }, { "cve": "CVE-2024-30088", "vendor": "Microsoft", "product": "Windows ", "name": "Microsoft Windows Kernel TOCTOU Race Condition Vulnerability", "description": "Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. ", "date_added": "2024-10-15", "due_date": "2024-11-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-367" ], "epss": 0.68202, "epss_percentile": 0.99326, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-30088", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30088" } ] }, { "cve": "CVE-2024-6670", "vendor": "Progress", "product": "WhatsUp Gold", "name": "Progress WhatsUp Gold SQL Injection Vulnerability", "description": "Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user.", "date_added": "2024-09-16", "due_date": "2024-10-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-89" ], "epss": 0.93, "epss_percentile": 0.99833, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "progress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-6670", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6670" } ] }, { "cve": "CVE-2024-40766", "vendor": "SonicWall", "product": "SonicOS", "name": "SonicWall SonicOS Improper Access Control Vulnerability", "description": "SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.", "date_added": "2024-09-09", "due_date": "2024-09-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-284" ], "epss": 0.18379, "epss_percentile": 0.97207, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-40766", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40766" } ] }, { "cve": "CVE-2017-1000253", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel PIE Stack Buffer Corruption Vulnerability ", "description": "Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. ", "date_added": "2024-09-09", "due_date": "2024-09-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-119" ], "epss": 0.10695, "epss_percentile": 0.9578, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-1000253", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000253" } ] }, { "cve": "CVE-2024-23897", "vendor": "Jenkins", "product": "Jenkins Command Line Interface (CLI)", "name": "Jenkins Command Line Interface (CLI) Path Traversal Vulnerability", "description": "Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.", "date_added": "2024-08-19", "due_date": "2024-09-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-27" ], "epss": 0.99999, "epss_percentile": 0.99995, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "jenkins", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-23897", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23897" } ] }, { "cve": "CVE-2024-37085", "vendor": "VMware", "product": "ESXi", "name": "VMware ESXi Authentication Bypass Vulnerability", "description": "VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.", "date_added": "2024-07-30", "due_date": "2024-08-20", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-305" ], "epss": 0.2677, "epss_percentile": 0.98016, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-37085", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37085" } ] }, { "cve": "CVE-2024-26169", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability", "description": "Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.", "date_added": "2024-06-13", "due_date": "2024-07-04", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "known_ransomware": true, "cwes": [ "CWE-269" ], "epss": 0.03981, "epss_percentile": 0.9038, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-26169", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26169" } ] }, { "cve": "CVE-2024-4577", "vendor": "PHP Group", "product": "PHP", "name": "PHP-CGI OS Command Injection Vulnerability", "description": "PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.", "date_added": "2024-06-12", "due_date": "2024-07-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-78" ], "epss": 0.99987, "epss_percentile": 0.99984, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "php", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-4577", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4577" } ] }, { "cve": "CVE-2024-1086", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use-After-Free Vulnerability", "description": "Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.", "date_added": "2024-05-30", "due_date": "2024-06-20", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-416" ], "epss": 0.28058, "epss_percentile": 0.98095, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "linux kernel", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-1086", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1086" } ] }, { "cve": "CVE-2024-3400", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Command Injection Vulnerability", "description": "Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.", "date_added": "2024-04-12", "due_date": "2024-04-19", "required_action": "Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.", "known_ransomware": true, "cwes": [ "CWE-20", "CWE-77" ], "epss": 0.99999, "epss_percentile": 1.0, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-3400", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3400" } ] }, { "cve": "CVE-2023-24955", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Code Injection Vulnerability", "description": "Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.", "date_added": "2024-03-26", "due_date": "2024-04-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-94" ], "epss": 0.84974, "epss_percentile": 0.99713, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-24955", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24955" } ] }, { "cve": "CVE-2021-44529", "vendor": "Ivanti", "product": "Endpoint Manager Cloud Service Appliance (EPM CSA)", "name": "Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ", "description": "Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).", "date_added": "2024-03-25", "due_date": "2024-04-15", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-94" ], "epss": 0.99105, "epss_percentile": 0.99934, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-44529", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44529" } ] }, { "cve": "CVE-2023-48788", "vendor": "Fortinet", "product": "FortiClient EMS", "name": "Fortinet FortiClient EMS SQL Injection Vulnerability", "description": "Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.", "date_added": "2024-03-25", "due_date": "2024-04-15", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-89" ], "epss": 0.98446, "epss_percentile": 0.99919, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-48788", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48788" } ] }, { "cve": "CVE-2024-27198", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Authentication Bypass Vulnerability", "description": "JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.", "date_added": "2024-03-07", "due_date": "2024-03-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-288" ], "epss": 0.99938, "epss_percentile": 0.99972, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "jetbrains teamcity", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-27198", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27198" } ] }, { "cve": "CVE-2024-21338", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability", "description": "Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.", "date_added": "2024-03-04", "due_date": "2024-03-25", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-822" ], "epss": 0.5981, "epss_percentile": 0.99125, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-21338", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21338" } ] }, { "cve": "CVE-2020-3259", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Information Disclosure Vulnerability", "description": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.", "date_added": "2024-02-15", "due_date": "2024-03-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-200" ], "epss": 0.71789, "epss_percentile": 0.99422, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "adaptive security", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-3259", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-3259" } ] }, { "cve": "CVE-2024-21412", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability", "description": "Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.", "date_added": "2024-02-13", "due_date": "2024-03-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-693" ], "epss": 0.9941, "epss_percentile": 0.99943, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-21412", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21412" } ] }, { "cve": "CVE-2024-21762", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Out-of-Bound Write Vulnerability", "description": "Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.", "date_added": "2024-02-09", "due_date": "2024-02-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.83428, "epss_percentile": 0.99682, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-21762", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21762" } ] }, { "cve": "CVE-2024-21893", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and Neurons", "name": "Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability", "description": "Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.", "date_added": "2024-01-31", "due_date": "2024-02-02", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-918" ], "epss": 0.99999, "epss_percentile": 0.99999, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-21893", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21893" } ] }, { "cve": "CVE-2023-22527", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "name": "Atlassian Confluence Data Center and Server Template Injection Vulnerability", "description": "Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution.", "date_added": "2024-01-24", "due_date": "2024-02-14", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-74" ], "epss": 0.99984, "epss_percentile": 0.99983, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "confluence", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-22527", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22527" } ] }, { "cve": "CVE-2023-35082", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM) and MobileIron Core", "name": "Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability", "description": "Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application.", "date_added": "2024-01-18", "due_date": "2024-02-08", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.99999, "epss_percentile": 0.99996, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-35082", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35082" } ] }, { "cve": "CVE-2023-29357", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Privilege Escalation Vulnerability", "description": "Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.", "date_added": "2024-01-10", "due_date": "2024-01-31", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-303" ], "epss": 0.99984, "epss_percentile": 0.99983, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-29357", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29357" } ] }, { "cve": "CVE-2023-46805", "vendor": "Ivanti", "product": "Connect Secure and Policy Secure", "name": "Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability", "description": "Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.", "date_added": "2024-01-10", "due_date": "2024-01-22", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.99986, "epss_percentile": 0.99983, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-46805", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46805" } ] }, { "cve": "CVE-2024-21887", "vendor": "Ivanti", "product": "Connect Secure and Policy Secure", "name": "Ivanti Connect Secure and Policy Secure Command Injection Vulnerability", "description": "Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This vulnerability can be leveraged in conjunction with CVE-2023-46805, an authenticated bypass issue.", "date_added": "2024-01-10", "due_date": "2024-01-22", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-77" ], "epss": 0.99999, "epss_percentile": 0.99999, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2024-21887", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21887" } ] }, { "cve": "CVE-2023-29300", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "description": "Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.99991, "epss_percentile": 0.99986, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-29300", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29300" } ] }, { "cve": "CVE-2023-38203", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "description": "Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.97074, "epss_percentile": 0.99893, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-38203", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38203" } ] }, { "cve": "CVE-2023-22518", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "name": "Atlassian Confluence Data Center and Server Improper Authorization Vulnerability", "description": "Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data.", "date_added": "2023-11-07", "due_date": "2023-11-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-863" ], "epss": 0.99999, "epss_percentile": 0.99996, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "confluence", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-22518", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22518" } ] }, { "cve": "CVE-2023-46747", "vendor": "F5", "product": "BIG-IP Configuration Utility", "name": "F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability", "description": "F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.", "date_added": "2023-10-31", "due_date": "2023-11-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-288" ], "epss": 0.96515, "epss_percentile": 0.99883, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "f5", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-46747", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46747" } ] }, { "cve": "CVE-2023-4966", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "description": "Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.", "date_added": "2023-10-18", "due_date": "2023-11-08", "required_action": "Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-119" ], "epss": 0.99999, "epss_percentile": 0.99997, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-4966", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4966" } ] }, { "cve": "CVE-2023-22515", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "name": "Atlassian Confluence Data Center and Server Broken Access Control Vulnerability", "description": "Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.", "date_added": "2023-10-05", "due_date": "2023-10-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.", "known_ransomware": true, "cwes": [], "epss": 0.99223, "epss_percentile": 0.99937, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "confluence", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-22515", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22515" } ] }, { "cve": "CVE-2023-40044", "vendor": "Progress", "product": "WS_FTP Server", "name": "Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability", "description": "Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.", "date_added": "2023-10-05", "due_date": "2023-10-26", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.90355, "epss_percentile": 0.998, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "progress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-40044", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40044" } ] }, { "cve": "CVE-2023-42793", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Authentication Bypass Vulnerability", "description": "JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.", "date_added": "2023-10-04", "due_date": "2023-10-25", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-288" ], "epss": 0.99987, "epss_percentile": 0.99984, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "jetbrains teamcity", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-42793", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42793" } ] }, { "cve": "CVE-2023-20269", "vendor": "Cisco", "product": "Adaptive Security Appliance and Firepower Threat Defense", "name": "Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability", "description": "Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.", "date_added": "2023-09-13", "due_date": "2023-10-04", "required_action": "Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.", "known_ransomware": true, "cwes": [ "CWE-288" ], "epss": 0.25453, "epss_percentile": 0.97935, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "adaptive security", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-20269", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20269" } ] }, { "cve": "CVE-2023-38035", "vendor": "Ivanti", "product": "Sentry", "name": "Ivanti Sentry Authentication Bypass Vulnerability", "description": "Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.", "date_added": "2023-08-22", "due_date": "2023-09-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-863" ], "epss": 0.9995, "epss_percentile": 0.99974, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-38035", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38035" } ] }, { "cve": "CVE-2023-35078", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability", "description": "Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device details for users on a vulnerable system. An attacker can also make other configuration changes including installing software and modifying security profiles on registered devices.", "date_added": "2023-07-25", "due_date": "2023-08-15", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.99999, "epss_percentile": 0.99998, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-35078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35078" } ] }, { "cve": "CVE-2023-3519", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability", "description": "Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.", "date_added": "2023-07-19", "due_date": "2023-08-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-94" ], "epss": 0.99749, "epss_percentile": 0.99955, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "netscaler", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-3519", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3519" } ] }, { "cve": "CVE-2023-36884", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Search Remote Code Execution Vulnerability", "description": "Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.", "date_added": "2023-07-17", "due_date": "2023-08-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "known_ransomware": true, "cwes": [ "CWE-362" ], "epss": 0.98932, "epss_percentile": 0.99929, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-36884", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36884" } ] }, { "cve": "CVE-2023-27997", "vendor": "Fortinet", "product": "FortiOS and FortiProxy SSL-VPN", "name": "Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability", "description": "Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.", "date_added": "2023-06-13", "due_date": "2023-07-04", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-122" ], "epss": 0.85689, "epss_percentile": 0.99726, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-27997", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27997" } ] }, { "cve": "CVE-2023-34362", "vendor": "Progress", "product": "MOVEit Transfer", "name": "Progress MOVEit Transfer SQL Injection Vulnerability", "description": "Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or delete database elements.", "date_added": "2023-06-02", "due_date": "2023-06-23", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-89" ], "epss": 0.99934, "epss_percentile": 0.99971, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "moveit", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-34362", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34362" } ] }, { "cve": "CVE-2023-28252", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "description": "Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.", "date_added": "2023-04-11", "due_date": "2023-05-02", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-122" ], "epss": 0.48973, "epss_percentile": 0.98871, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-28252", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28252" } ] }, { "cve": "CVE-2019-1388", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability", "description": "Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.", "date_added": "2023-04-07", "due_date": "2023-04-28", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-269" ], "epss": 0.08589, "epss_percentile": 0.95036, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1388", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1388" } ] }, { "cve": "CVE-2017-7494", "vendor": "Samba", "product": "Samba", "name": "Samba Remote Code Execution Vulnerability", "description": "Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.", "date_added": "2023-03-30", "due_date": "2023-04-20", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-94" ], "epss": 0.99448, "epss_percentile": 0.99944, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "samba", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-7494", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7494" } ] }, { "cve": "CVE-2023-24880", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "description": "Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.", "date_added": "2023-03-14", "due_date": "2023-04-04", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-863" ], "epss": 0.78005, "epss_percentile": 0.99573, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-24880", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24880" } ] }, { "cve": "CVE-2023-23376", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "description": "Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.", "date_added": "2023-02-14", "due_date": "2023-03-07", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-122" ], "epss": 0.10853, "epss_percentile": 0.95824, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2023-23376", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23376" } ] }, { "cve": "CVE-2015-2291", "vendor": "Intel", "product": "Ethernet Diagnostics Driver for Windows", "name": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability", "description": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).", "date_added": "2023-02-10", "due_date": "2023-03-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20" ], "epss": 0.09011, "epss_percentile": 0.95234, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2015-2291", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2291" } ] }, { "cve": "CVE-2022-21587", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Unspecified Vulnerability", "description": "Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.", "date_added": "2023-02-02", "due_date": "2023-02-23", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-306" ], "epss": 0.98342, "epss_percentile": 0.99918, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-21587", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21587" } ] }, { "cve": "CVE-2022-47966", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability", "description": "Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.", "date_added": "2023-01-23", "due_date": "2023-02-13", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.99753, "epss_percentile": 0.99955, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "manageengine", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-47966", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47966" } ] }, { "cve": "CVE-2022-41080", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.", "date_added": "2023-01-10", "due_date": "2023-01-31", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.77326, "epss_percentile": 0.99555, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-41080", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41080" } ] }, { "cve": "CVE-2022-42475", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability", "description": "Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.", "date_added": "2022-12-13", "due_date": "2023-01-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-197" ], "epss": 0.99474, "epss_percentile": 0.99944, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-42475", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42475" } ] }, { "cve": "CVE-2022-41091", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "description": "Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.", "date_added": "2022-11-08", "due_date": "2022-12-09", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-863" ], "epss": 0.0191, "epss_percentile": 0.79482, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-41091", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41091" } ] }, { "cve": "CVE-2022-41073", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "description": "Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.", "date_added": "2022-11-08", "due_date": "2022-12-09", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.02362, "epss_percentile": 0.8353, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-41073", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41073" } ] }, { "cve": "CVE-2020-3433", "vendor": "Cisco", "product": "AnyConnect Secure", "name": "Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability", "description": "Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.", "date_added": "2022-10-24", "due_date": "2022-11-14", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-427" ], "epss": 0.10049, "epss_percentile": 0.95587, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "connect secure", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-3433", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-3433" } ] }, { "cve": "CVE-2020-3153", "vendor": "Cisco", "product": "AnyConnect Secure", "name": "Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability", "description": "Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.", "date_added": "2022-10-24", "due_date": "2022-11-14", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-427" ], "epss": 0.28307, "epss_percentile": 0.98107, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "connect secure", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-3153", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-3153" } ] }, { "cve": "CVE-2022-41352", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.", "date_added": "2022-10-20", "due_date": "2022-11-10", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.95478, "epss_percentile": 0.99871, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-41352", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41352" } ] }, { "cve": "CVE-2022-40684", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Authentication Bypass Vulnerability", "description": "Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.", "date_added": "2022-10-11", "due_date": "2022-11-01", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-288" ], "epss": 0.99984, "epss_percentile": 0.99983, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-40684", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40684" } ] }, { "cve": "CVE-2022-41082", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.", "date_added": "2022-09-30", "due_date": "2022-10-21", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.9997, "epss_percentile": 0.99978, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-41082", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41082" } ] }, { "cve": "CVE-2022-41040", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Server-Side Request Forgery Vulnerability", "description": "Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.", "date_added": "2022-09-30", "due_date": "2022-10-21", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-918" ], "epss": 0.99956, "epss_percentile": 0.99975, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-41040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41040" } ] }, { "cve": "CVE-2022-37969", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "description": "Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.", "date_added": "2022-09-14", "due_date": "2022-10-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20", "CWE-787" ], "epss": 0.28275, "epss_percentile": 0.98106, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-37969", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37969" } ] }, { "cve": "CVE-2022-27593", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Externally Controlled Reference Vulnerability", "description": "Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-610" ], "epss": 0.87908, "epss_percentile": 0.99765, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "qnap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-27593", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27593" } ] }, { "cve": "CVE-2018-6530", "vendor": "D-Link", "product": "Multiple Routers", "name": "D-Link Multiple Routers OS Command Injection Vulnerability", "description": "Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.", "known_ransomware": true, "cwes": [ "CWE-78" ], "epss": 0.96682, "epss_percentile": 0.99886, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "d-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-6530", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6530" } ] }, { "cve": "CVE-2018-13374", "vendor": "Fortinet", "product": "FortiOS and FortiADC", "name": "Fortinet FortiOS and FortiADC Improper Access Control Vulnerability", "description": "Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-732" ], "epss": 0.38088, "epss_percentile": 0.98548, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-13374", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13374" } ] }, { "cve": "CVE-2022-27925", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.", "date_added": "2022-08-11", "due_date": "2022-09-01", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.98676, "epss_percentile": 0.99924, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-27925", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27925" } ] }, { "cve": "CVE-2022-37042", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution.", "date_added": "2022-08-11", "due_date": "2022-09-01", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-23" ], "epss": 0.91893, "epss_percentile": 0.99819, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-37042", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37042" } ] }, { "cve": "CVE-2022-27924", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.", "date_added": "2022-08-04", "due_date": "2022-08-25", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-93" ], "epss": 0.93908, "epss_percentile": 0.99846, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-27924", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27924" } ] }, { "cve": "CVE-2022-30190", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability", "description": "A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.", "date_added": "2022-06-14", "due_date": "2022-07-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-610" ], "epss": 0.99163, "epss_percentile": 0.99934, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-30190", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30190" } ] }, { "cve": "CVE-2019-7195", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Path Traversal Vulnerability", "description": "QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.89681, "epss_percentile": 0.99789, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "qnap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-7195", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7195" } ] }, { "cve": "CVE-2019-7194", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Path Traversal Vulnerability", "description": "QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.82713, "epss_percentile": 0.99666, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "qnap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-7194", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7194" } ] }, { "cve": "CVE-2019-7193", "vendor": "QNAP", "product": "QTS", "name": "QNAP QTS Improper Input Validation Vulnerability", "description": "QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system.", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20" ], "epss": 0.14367, "epss_percentile": 0.96591, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "qnap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-7193", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7193" } ] }, { "cve": "CVE-2019-7192", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Improper Access Control Vulnerability", "description": "QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-863" ], "epss": 0.88102, "epss_percentile": 0.99768, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "qnap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-7192", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7192" } ] }, { "cve": "CVE-2022-26134", "vendor": "Atlassian", "product": "Confluence Server/Data Center", "name": "Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability", "description": "Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.", "date_added": "2022-06-02", "due_date": "2022-06-06", "required_action": "Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.", "known_ransomware": true, "cwes": [ "CWE-917" ], "epss": 0.99999, "epss_percentile": 0.99994, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "confluence", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-26134", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26134" } ] }, { "cve": "CVE-2013-0431", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Sandbox Bypass Vulnerability", "description": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.9015, "epss_percentile": 0.99798, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2013-0431", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0431" } ] }, { "cve": "CVE-2013-0422", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Remote Code Execution Vulnerability", "description": "A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-264" ], "epss": 0.97024, "epss_percentile": 0.99892, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2013-0422", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0422" } ] }, { "cve": "CVE-2012-1710", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "description": "Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.07826, "epss_percentile": 0.94625, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2012-1710", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1710" } ] }, { "cve": "CVE-2010-1428", "vendor": "Red Hat", "product": "JBoss", "name": "Red Hat JBoss Information Disclosure Vulnerability", "description": "Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-264" ], "epss": 0.61487, "epss_percentile": 0.99161, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "jboss", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2010-1428", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1428" } ] }, { "cve": "CVE-2010-0738", "vendor": "Red Hat", "product": "JBoss", "name": "Red Hat JBoss Authentication Bypass Vulnerability", "description": "The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-264" ], "epss": 0.74722, "epss_percentile": 0.99501, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "jboss", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2010-0738", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0738" } ] }, { "cve": "CVE-2018-19953", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS File Station Cross-Site Scripting Vulnerability", "description": "A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-79", "CWE-80" ], "epss": 0.28982, "epss_percentile": 0.98147, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "qnap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-19953", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19953" } ] }, { "cve": "CVE-2018-19949", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS File Station Command Injection Vulnerability", "description": "A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20", "CWE-77", "CWE-78" ], "epss": 0.2863, "epss_percentile": 0.98125, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "qnap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-19949", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19949" } ] }, { "cve": "CVE-2018-19943", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS File Station Cross-Site Scripting Vulnerability", "description": "A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-79", "CWE-80" ], "epss": 0.21476, "epss_percentile": 0.97595, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "qnap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-19943", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19943" } ] }, { "cve": "CVE-2016-3351", "vendor": "Microsoft", "product": "Internet Explorer and Edge", "name": "Microsoft Internet Explorer and Edge Information Disclosure Vulnerability", "description": "An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-200" ], "epss": 0.26483, "epss_percentile": 0.97997, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2016-3351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3351" } ] }, { "cve": "CVE-2019-1385", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-59" ], "epss": 0.03604, "epss_percentile": 0.89335, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1385", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1385" } ] }, { "cve": "CVE-2019-1130", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-59" ], "epss": 0.01719, "epss_percentile": 0.77115, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1130", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1130" } ] }, { "cve": "CVE-2022-1388", "vendor": "F5", "product": "BIG-IP", "name": "F5 BIG-IP Missing Authentication Vulnerability", "description": "F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.", "date_added": "2022-05-10", "due_date": "2022-05-31", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-306" ], "epss": 0.99954, "epss_percentile": 0.99975, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "f5", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-1388", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1388" } ] }, { "cve": "CVE-2018-6882", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.", "date_added": "2022-04-19", "due_date": "2022-05-10", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-79" ], "epss": 0.29761, "epss_percentile": 0.98189, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-6882", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6882" } ] }, { "cve": "CVE-2019-16057", "vendor": "D-Link", "product": "DNS-320 Storage Device", "name": "D-Link DNS-320 Remote Code Execution Vulnerability", "description": "The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution.", "date_added": "2022-04-15", "due_date": "2022-05-06", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "known_ransomware": true, "cwes": [ "CWE-78" ], "epss": 0.86491, "epss_percentile": 0.99738, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "d-link", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-16057", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16057" } ] }, { "cve": "CVE-2022-22954", "vendor": "VMware", "product": "Workspace ONE Access and Identity Manager", "name": "VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability", "description": "VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.", "date_added": "2022-04-14", "due_date": "2022-05-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-94" ], "epss": 0.99998, "epss_percentile": 0.9999, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-22954", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22954" } ] }, { "cve": "CVE-2022-24521", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows CLFS Driver Privilege Escalation Vulnerability", "description": "Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.", "date_added": "2022-04-13", "due_date": "2022-05-04", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-787", "CWE-1285" ], "epss": 0.07134, "epss_percentile": 0.94205, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-24521", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24521" } ] }, { "cve": "CVE-2018-7602", "vendor": "Drupal", "product": "Core", "name": "Drupal Core Remote Code Execution Vulnerability", "description": "A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.", "date_added": "2022-04-13", "due_date": "2022-05-04", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.99172, "epss_percentile": 0.99935, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "drupal", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-7602", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7602" } ] }, { "cve": "CVE-2021-28799", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS Improper Authorization Vulnerability", "description": "QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.", "date_added": "2022-03-31", "due_date": "2022-04-21", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-285" ], "epss": 0.7825, "epss_percentile": 0.99577, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "qnap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-28799", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28799" } ] }, { "cve": "CVE-2021-38646", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability", "description": "Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.07987, "epss_percentile": 0.94712, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-38646", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38646" } ] }, { "cve": "CVE-2021-26085", "vendor": "Atlassian", "product": "Confluence Server", "name": "Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability", "description": "Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-425" ], "epss": 0.99937, "epss_percentile": 0.99972, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "confluence", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-26085", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26085" } ] }, { "cve": "CVE-2021-20028", "vendor": "SonicWall", "product": "Secure Remote Access (SRA)", "name": "SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability", "description": "SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "known_ransomware": true, "cwes": [ "CWE-89" ], "epss": 0.30084, "epss_percentile": 0.98205, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-20028", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20028" } ] }, { "cve": "CVE-2018-8440", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "description": "An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.18386, "epss_percentile": 0.97208, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-8440", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8440" } ] }, { "cve": "CVE-2017-0213", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "description": "Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.84258, "epss_percentile": 0.99698, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-0213", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0213" } ] }, { "cve": "CVE-2016-0189", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "description": "The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-119" ], "epss": 0.94062, "epss_percentile": 0.99848, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2016-0189", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0189" } ] }, { "cve": "CVE-2013-2551", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "description": "Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-416" ], "epss": 0.73918, "epss_percentile": 0.99478, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2013-2551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2551" } ] }, { "cve": "CVE-2013-2465", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Unspecified Vulnerability", "description": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.98802, "epss_percentile": 0.99927, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2013-2465", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2465" } ] }, { "cve": "CVE-2022-21999", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "description": "Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-40", "CWE-1386" ], "epss": 0.41007, "epss_percentile": 0.9865, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-21999", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21999" } ] }, { "cve": "CVE-2021-22941", "vendor": "Citrix", "product": "ShareFile", "name": "Citrix ShareFile Improper Access Control Vulnerability", "description": "Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-284" ], "epss": 0.53585, "epss_percentile": 0.98986, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "citrix", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-22941", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22941" } ] }, { "cve": "CVE-2020-2021", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "description": "Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-347" ], "epss": 0.04362, "epss_percentile": 0.91138, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-2021", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-2021" } ] }, { "cve": "CVE-2019-11043", "vendor": "PHP", "product": "FastCGI Process Manager (FPM)", "name": "PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability", "description": "In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-120" ], "epss": 0.99748, "epss_percentile": 0.99955, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "php", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-11043", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11043" } ] }, { "cve": "CVE-2018-1273", "vendor": "VMware Tanzu", "product": "Spring Data Commons", "name": "VMware Tanzu Spring Data Commons Property Binder Vulnerability", "description": "Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-94" ], "epss": 0.96956, "epss_percentile": 0.99891, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-1273", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1273" } ] }, { "cve": "CVE-2017-12615", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat on Windows Remote Code Execution Vulnerability", "description": "When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-434" ], "epss": 0.99641, "epss_percentile": 0.9995, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "apache tomcat", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-12615", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12615" } ] }, { "cve": "CVE-2017-0146", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SMB Remote Code Execution Vulnerability", "description": "The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20" ], "epss": 0.89862, "epss_percentile": 0.99792, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-0146", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0146" } ] }, { "cve": "CVE-2010-2861", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Directory Traversal Vulnerability", "description": "A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.99747, "epss_percentile": 0.99954, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2010-2861", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2861" } ] }, { "cve": "CVE-2020-5135", "vendor": "SonicWall", "product": "SonicOS", "name": "SonicWall SonicOS Buffer Overflow Vulnerability", "description": "A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-120" ], "epss": 0.26869, "epss_percentile": 0.98022, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-5135", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5135" } ] }, { "cve": "CVE-2019-1405", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.30168, "epss_percentile": 0.98209, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1405", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1405" } ] }, { "cve": "CVE-2019-1322", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.19205, "epss_percentile": 0.97309, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1322", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1322" } ] }, { "cve": "CVE-2019-1315", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-59" ], "epss": 0.03478, "epss_percentile": 0.88953, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1315", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1315" } ] }, { "cve": "CVE-2019-1253", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-59" ], "epss": 0.11616, "epss_percentile": 0.96015, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1253", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1253" } ] }, { "cve": "CVE-2019-1129", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-59" ], "epss": 0.01782, "epss_percentile": 0.77951, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1129", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1129" } ] }, { "cve": "CVE-2019-1064", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-59" ], "epss": 0.06886, "epss_percentile": 0.94007, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1064", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1064" } ] }, { "cve": "CVE-2019-0841", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-59" ], "epss": 0.414, "epss_percentile": 0.98664, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-0841", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0841" } ] }, { "cve": "CVE-2019-0543", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.04718, "epss_percentile": 0.9173, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-0543", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0543" } ] }, { "cve": "CVE-2017-0101", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Transaction Manager Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-119" ], "epss": 0.57482, "epss_percentile": 0.99076, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-0101", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0101" } ] }, { "cve": "CVE-2016-3309", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-264" ], "epss": 0.20467, "epss_percentile": 0.97485, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2016-3309", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3309" } ] }, { "cve": "CVE-2009-3960", "vendor": "Adobe", "product": "BlazeDS", "name": "Adobe BlazeDS Information Disclosure Vulnerability", "description": "Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.", "date_added": "2022-03-07", "due_date": "2022-09-07", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.90118, "epss_percentile": 0.99797, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2009-3960", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3960" } ] }, { "cve": "CVE-2021-41379", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Installer Privilege Escalation Vulnerability", "description": "Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-1386" ], "epss": 0.19452, "epss_percentile": 0.97347, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-41379", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41379" } ] }, { "cve": "CVE-2018-8581", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.27355, "epss_percentile": 0.98048, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-8581", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8581" } ] }, { "cve": "CVE-2016-4117", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "description": "An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "known_ransomware": true, "cwes": [], "epss": 0.94354, "epss_percentile": 0.99852, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2016-4117", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4117" } ] }, { "cve": "CVE-2016-1019", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "description": "Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "known_ransomware": true, "cwes": [], "epss": 0.22316, "epss_percentile": 0.97668, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2016-1019", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1019" } ] }, { "cve": "CVE-2016-0099", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability", "description": "A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-264" ], "epss": 0.37045, "epss_percentile": 0.98506, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2016-0099", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0099" } ] }, { "cve": "CVE-2015-7645", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "description": "Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "known_ransomware": true, "cwes": [], "epss": 0.65339, "epss_percentile": 0.99254, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2015-7645", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7645" } ] }, { "cve": "CVE-2012-4681", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "description": "The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.98536, "epss_percentile": 0.99922, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" } ] }, { "cve": "CVE-2012-1723", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "description": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.93688, "epss_percentile": 0.99844, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2012-1723", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1723" } ] }, { "cve": "CVE-2012-0507", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "description": "An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.98189, "epss_percentile": 0.99915, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "oracle", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2012-0507", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0507" } ] }, { "cve": "CVE-2010-0188", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability", "description": "Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-94" ], "epss": 0.88246, "epss_percentile": 0.99771, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2010-0188", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0188" } ] }, { "cve": "CVE-2008-2992", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Reader and Acrobat Input Validation Vulnerability", "description": "Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-119" ], "epss": 0.98482, "epss_percentile": 0.9992, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2008-2992", "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2992" } ] }, { "cve": "CVE-2022-24682", "vendor": "Synacor", "product": "Zimbra Collaborate Suite (ZCS)", "name": "Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability", "description": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.", "date_added": "2022-02-25", "due_date": "2022-03-11", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-79", "CWE-116" ], "epss": 0.30931, "epss_percentile": 0.98248, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "zimbra", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2022-24682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24682" } ] }, { "cve": "CVE-2019-0752", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Type Confusion Vulnerability", "description": "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer", "date_added": "2022-02-15", "due_date": "2022-08-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-843" ], "epss": 0.81679, "epss_percentile": 0.99642, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-0752", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0752" } ] }, { "cve": "CVE-2018-8174", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability", "description": "A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka \"Windows VBScript Engine Remote Code Execution\"", "date_added": "2022-02-15", "due_date": "2022-08-15", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.88243, "epss_percentile": 0.99771, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-8174", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8174" } ] }, { "cve": "CVE-2018-15982", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "description": "Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability", "date_added": "2022-02-15", "due_date": "2022-08-15", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "known_ransomware": true, "cwes": [ "CWE-416" ], "epss": 0.89581, "epss_percentile": 0.99788, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-15982", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15982" } ] }, { "cve": "CVE-2017-10271", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle Corporation WebLogic Server Remote Code Execution Vulnerability", "description": "Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.99994, "epss_percentile": 0.99988, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "weblogic", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-10271", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10271" } ] }, { "cve": "CVE-2021-20038", "vendor": "SonicWall", "product": "SMA 100 Appliances", "name": "SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability", "description": "SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.", "date_added": "2022-01-28", "due_date": "2022-02-11", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-121" ], "epss": 0.99912, "epss_percentile": 0.99968, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-20038", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20038" } ] }, { "cve": "CVE-2020-0787", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability", "description": "Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.", "date_added": "2022-01-28", "due_date": "2022-07-28", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-269", "CWE-59" ], "epss": 0.42524, "epss_percentile": 0.98696, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-0787", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0787" } ] }, { "cve": "CVE-2021-21975", "vendor": "VMware", "product": "vRealize Operations Manager API", "name": "VMware Server Side Request Forgery in vRealize Operations Manager API", "description": "Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.", "date_added": "2022-01-18", "due_date": "2022-02-01", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-918" ], "epss": 0.78001, "epss_percentile": 0.99572, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-21975", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21975" } ] }, { "cve": "CVE-2019-2725", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server, Injection", "description": "Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-74" ], "epss": 0.99977, "epss_percentile": 0.9998, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "weblogic", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-2725", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2725" } ] }, { "cve": "CVE-2018-13382", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Improper Authorization", "description": "An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-285" ], "epss": 0.81691, "epss_percentile": 0.99643, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-13382", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13382" } ] }, { "cve": "CVE-2018-13383", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Out-of-bounds Write", "description": "A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.33647, "epss_percentile": 0.98376, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-13383", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13383" } ] }, { "cve": "CVE-2019-1579", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "description": "Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-134" ], "epss": 0.46239, "epss_percentile": 0.98803, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "pan-os", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1579", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1579" } ] }, { "cve": "CVE-2021-43890", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Installer Spoofing Vulnerability", "description": "Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.", "date_added": "2021-12-15", "due_date": "2021-12-29", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.11294, "epss_percentile": 0.95943, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-43890", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43890" } ] }, { "cve": "CVE-2017-12149", "vendor": "Red Hat", "product": "JBoss Application Server", "name": "Red Hat JBoss Application Server Remote Code Execution Vulnerability", "description": "The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.", "date_added": "2021-12-10", "due_date": "2022-06-10", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.90713, "epss_percentile": 0.99805, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "jboss", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-12149", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12149" } ] }, { "cve": "CVE-2021-40449", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Win32k Privilege Escalation Vulnerability", "description": "Unspecified vulnerability allows for an authenticated user to escalate privileges.", "date_added": "2021-11-17", "due_date": "2021-12-01", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-416" ], "epss": 0.81936, "epss_percentile": 0.9965, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-40449", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40449" } ] }, { "cve": "CVE-2021-42321", "vendor": "Microsoft", "product": "Exchange", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "description": "An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.", "date_added": "2021-11-17", "due_date": "2021-12-01", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-184", "CWE-502" ], "epss": 0.91737, "epss_percentile": 0.99816, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "microsoft exchange", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-42321", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42321" } ] }, { "cve": "CVE-2018-4878", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "description": "Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "known_ransomware": true, "cwes": [ "CWE-416" ], "epss": 0.89532, "epss_percentile": 0.99788, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "adobe", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-4878", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-4878" } ] }, { "cve": "CVE-2021-42013", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Path Traversal Vulnerability", "description": "Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.99964, "epss_percentile": 0.99976, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apache http", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-42013", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013" } ] }, { "cve": "CVE-2021-41773", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Path Traversal Vulnerability", "description": "Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default \ufffdrequire all denied\ufffd or if CGI scripts are enabled. The original patch issued under this CVE ID is insufficient, please review remediation information under CVE-2021-42013.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.99992, "epss_percentile": 0.99986, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "apache http", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-41773", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773" } ] }, { "cve": "CVE-2017-5638", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Remote Code Execution Vulnerability", "description": "Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20" ], "epss": 0.99999, "epss_percentile": 0.99995, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "struts", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-5638", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5638" } ] }, { "cve": "CVE-2021-26084", "vendor": "Atlassian", "product": "Confluence Server and Data Center", "name": "Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability", "description": "Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-917" ], "epss": 0.99999, "epss_percentile": 0.99994, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "confluence", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-26084", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26084" } ] }, { "cve": "CVE-2019-11580", "vendor": "Atlassian", "product": "Crowd and Crowd Data Center", "name": "Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability", "description": "Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.95355, "epss_percentile": 0.99869, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "atlassian", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-11580", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11580" } ] }, { "cve": "CVE-2019-3396", "vendor": "Atlassian", "product": "Confluence Server and Data Server", "name": "Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability", "description": "Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.99913, "epss_percentile": 0.99968, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "confluence", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-3396", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3396" } ] }, { "cve": "CVE-2020-3580", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability", "description": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-79" ], "epss": 0.85575, "epss_percentile": 0.99724, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "adaptive security", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-3580", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-3580" } ] }, { "cve": "CVE-2019-13608", "vendor": "Citrix", "product": "StoreFront Server", "name": "Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability", "description": "Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-611" ], "epss": 0.30041, "epss_percentile": 0.982, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "citrix", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-13608", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13608" } ] }, { "cve": "CVE-2019-19781", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability", "description": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.99999, "epss_percentile": 0.99998, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "citrix", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-19781", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19781" } ] }, { "cve": "CVE-2019-11634", "vendor": "Citrix", "product": "Workspace Application and Receiver for Windows", "name": "Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability", "description": "Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.08091, "epss_percentile": 0.94772, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "citrix", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-11634", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11634" } ] }, { "cve": "CVE-2018-7600", "vendor": "Drupal", "product": "Drupal Core", "name": "Drupal Core Remote Code Execution Vulnerability", "description": "Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site, resulting in complete site compromise.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20" ], "epss": 0.99991, "epss_percentile": 0.99985, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "drupal", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-7600", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7600" } ] }, { "cve": "CVE-2021-22205", "vendor": "GitLab", "product": "Community and Enterprise Editions", "name": "GitLab Community and Enterprise Editions Remote Code Execution Vulnerability", "description": "GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20", "CWE-95" ], "epss": 0.99731, "epss_percentile": 0.99953, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "gitlab", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-22205", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22205" } ] }, { "cve": "CVE-2020-5902", "vendor": "F5", "product": "BIG-IP", "name": "F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability", "description": "F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.99999, "epss_percentile": 1.0, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "f5", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-5902", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5902" } ] }, { "cve": "CVE-2021-22986", "vendor": "F5", "product": "BIG-IP and BIG-IQ Centralized Management", "name": "F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability", "description": "F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-863" ], "epss": 0.99898, "epss_percentile": 0.99965, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "f5", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-22986", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22986" } ] }, { "cve": "CVE-2019-5591", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Default Configuration Vulnerability", "description": "Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-306" ], "epss": 0.18566, "epss_percentile": 0.97232, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-5591", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5591" } ] }, { "cve": "CVE-2020-12812", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS SSL VPN Improper Authentication Vulnerability", "description": "Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-178", "CWE-287" ], "epss": 0.45379, "epss_percentile": 0.98777, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-12812", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12812" } ] }, { "cve": "CVE-2018-13379", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS SSL VPN Path Traversal Vulnerability", "description": "Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.99999, "epss_percentile": 0.99995, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "fortinet", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-13379", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13379" } ] }, { "cve": "CVE-2014-1812", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability", "description": "Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-255" ], "epss": 0.65117, "epss_percentile": 0.99249, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2014-1812", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1812" } ] }, { "cve": "CVE-2020-0878", "vendor": "Microsoft", "product": "Edge and Internet Explorer", "name": "Microsoft Edge and Internet Explorer Memory Corruption Vulnerability", "description": "Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.02696, "epss_percentile": 0.85703, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-0878", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0878" } ] }, { "cve": "CVE-2021-34523", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.9999, "epss_percentile": 0.99985, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-34523", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34523" } ] }, { "cve": "CVE-2020-0688", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability", "description": "Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.99962, "epss_percentile": 0.99976, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-0688", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0688" } ] }, { "cve": "CVE-2017-0143", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability", "description": "Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20" ], "epss": 0.93307, "epss_percentile": 0.99838, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-0143", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0143" } ] }, { "cve": "CVE-2021-34473", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-918" ], "epss": 0.99999, "epss_percentile": 0.99996, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-34473", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473" } ] }, { "cve": "CVE-2021-34527", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Remote Code Execution Vulnerability", "description": "Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-269" ], "epss": 0.99792, "epss_percentile": 0.99956, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-34527", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34527" } ] }, { "cve": "CVE-2021-31207", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Security Feature Bypass Vulnerability", "description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20", "CWE-434" ], "epss": 0.99782, "epss_percentile": 0.99956, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-31207", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207" } ] }, { "cve": "CVE-2021-26411", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "description": "Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-416" ], "epss": 0.80765, "epss_percentile": 0.99627, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-26411", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26411" } ] }, { "cve": "CVE-2021-36942", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability", "description": "Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-749" ], "epss": 0.66023, "epss_percentile": 0.9927, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-36942", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36942" } ] }, { "cve": "CVE-2019-1215", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "description": "Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.19254, "epss_percentile": 0.97314, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1215", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1215" } ] }, { "cve": "CVE-2018-0802", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Memory Corruption Vulnerability", "description": "Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.93289, "epss_percentile": 0.99837, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-0802", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0802" } ] }, { "cve": "CVE-2017-11882", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Memory Corruption Vulnerability", "description": "Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-119" ], "epss": 0.99945, "epss_percentile": 0.99974, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-11882", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11882" } ] }, { "cve": "CVE-2019-1367", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "description": "Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.52449, "epss_percentile": 0.98956, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-1367", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1367" } ] }, { "cve": "CVE-2017-0199", "vendor": "Microsoft", "product": "Office and WordPad", "name": "Microsoft Office and WordPad Remote Code Execution Vulnerability", "description": "Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.99497, "epss_percentile": 0.99946, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft office", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2017-0199", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0199" } ] }, { "cve": "CVE-2020-0968", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "description": "Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.30676, "epss_percentile": 0.98234, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "internet explorer", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-0968", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0968" } ] }, { "cve": "CVE-2021-26855", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-918" ], "epss": 0.99996, "epss_percentile": 0.99989, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-26855", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855" } ] }, { "cve": "CVE-2021-26858", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.93651, "epss_percentile": 0.99844, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-26858", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26858" } ] }, { "cve": "CVE-2021-27065", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-39" ], "epss": 0.99876, "epss_percentile": 0.99964, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-27065", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27065" } ] }, { "cve": "CVE-2021-1675", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Remote Code Execution Vulnerability", "description": "Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-285" ], "epss": 0.85305, "epss_percentile": 0.99717, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-1675", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-1675" } ] }, { "cve": "CVE-2019-0604", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Remote Code Execution Vulnerability", "description": "Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20" ], "epss": 0.99913, "epss_percentile": 0.99968, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sharepoint", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-0604", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0604" } ] }, { "cve": "CVE-2021-26857", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.95762, "epss_percentile": 0.99873, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "exchange server", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-26857", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26857" } ] }, { "cve": "CVE-2021-36955", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "description": "Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [], "epss": 0.04071, "epss_percentile": 0.90571, "epss_date": "2026-10-19", "india_relevance": "medium", "relevance_match": "microsoft windows", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-36955", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36955" } ] }, { "cve": "CVE-2019-18935", "vendor": "Progress", "product": "Telerik UI for ASP.NET AJAX", "name": "Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability", "description": "Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-502" ], "epss": 0.99737, "epss_percentile": 0.99954, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "progress", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-18935", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18935" } ] }, { "cve": "CVE-2021-22893", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Use-After-Free Vulnerability", "description": "Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-287" ], "epss": 0.47172, "epss_percentile": 0.98826, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-22893", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22893" } ] }, { "cve": "CVE-2019-11510", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability", "description": "Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.99999, "epss_percentile": 1.0, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-11510", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11510" } ] }, { "cve": "CVE-2019-11539", "vendor": "Ivanti", "product": "Pulse Connect Secure and Pulse Policy Secure", "name": "Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability", "description": "Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-78" ], "epss": 0.98544, "epss_percentile": 0.99922, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "ivanti", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-11539", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11539" } ] }, { "cve": "CVE-2018-2380", "vendor": "SAP", "product": "Customer Relationship Management (CRM)", "name": "SAP Customer Relationship Management (CRM) Path Traversal Vulnerability", "description": "SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.28934, "epss_percentile": 0.98144, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sap", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2018-2380", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2380" } ] }, { "cve": "CVE-2021-20021", "vendor": "SonicWall", "product": "SonicWall Email Security", "name": "SonicWall Email Security Improper Privilege Management Vulnerability", "description": "SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20022 and CVE-2021-20023 to achieve privilege escalation.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-306" ], "epss": 0.8878, "epss_percentile": 0.99778, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-20021", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20021" } ] }, { "cve": "CVE-2019-7481", "vendor": "SonicWall", "product": "SMA100", "name": "SonicWall SMA100 SQL Injection Vulnerability", "description": "SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-89" ], "epss": 0.99906, "epss_percentile": 0.99967, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-7481", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7481" } ] }, { "cve": "CVE-2021-20022", "vendor": "SonicWall", "product": "SonicWall Email Security", "name": "SonicWall Email Security Unrestricted Upload of File Vulnerability", "description": "SonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability that allows a post-authenticated attacker to upload a file to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20023 to achieve privilege escalation.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-434" ], "epss": 0.16639, "epss_percentile": 0.96997, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-20022", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20022" } ] }, { "cve": "CVE-2021-20023", "vendor": "SonicWall", "product": "SonicWall Email Security", "name": "SonicWall Email Security Path Traversal Vulnerability", "description": "SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20022 to achieve privilege escalation.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-22" ], "epss": 0.51689, "epss_percentile": 0.98939, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-20023", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20023" } ] }, { "cve": "CVE-2021-20016", "vendor": "SonicWall", "product": "SSLVPN SMA100", "name": "SonicWall SSLVPN SMA100 SQL Injection Vulnerability", "description": "SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-89" ], "epss": 0.40038, "epss_percentile": 0.9862, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sonicwall", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-20016", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20016" } ] }, { "cve": "CVE-2020-12271", "vendor": "Sophos", "product": "SFOS", "name": "Sophos SFOS SQL Injection Vulnerability", "description": "Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords).", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-89" ], "epss": 0.42434, "epss_percentile": 0.98693, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "sophos", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-12271", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12271" } ] }, { "cve": "CVE-2019-5544", "vendor": "VMware", "product": "VMware ESXi and Horizon DaaS", "name": "VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability", "description": "VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-787" ], "epss": 0.98129, "epss_percentile": 0.99913, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2019-5544", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5544" } ] }, { "cve": "CVE-2020-3992", "vendor": "VMware", "product": "ESXi", "name": "VMware ESXi OpenSLP Use-After-Free Vulnerability", "description": "VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-416" ], "epss": 0.83015, "epss_percentile": 0.99673, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2020-3992", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-3992" } ] }, { "cve": "CVE-2021-22005", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server File Upload Vulnerability", "description": "VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-23" ], "epss": 0.99999, "epss_percentile": 0.99997, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-22005", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005" } ] }, { "cve": "CVE-2021-21972", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Remote Code Execution Vulnerability", "description": "VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-23" ], "epss": 0.99865, "epss_percentile": 0.99963, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-21972", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21972" } ] }, { "cve": "CVE-2021-21985", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Improper Input Validation Vulnerability", "description": "VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-20", "CWE-470", "CWE-918" ], "epss": 0.99999, "epss_percentile": 0.99993, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "vmware", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-21985", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985" } ] }, { "cve": "CVE-2021-40539", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability", "description": "Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "known_ransomware": true, "cwes": [ "CWE-55" ], "epss": 0.9896, "epss_percentile": 0.9993, "epss_date": "2026-10-19", "india_relevance": "high", "relevance_match": "manageengine", "watchlist": true, "tags": [], "sources": [ { "title": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "title": "NVD - CVE-2021-40539", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40539" } ] } ] }