4 results for “KEV”
CISA added CVE-2026-21962, an actively exploited Oracle WebLogic and HTTP Server access control flaw, to its Known Exploited Vulnerabilities Catalog on August 24. Federal agencies have until August 27 to remediate, setting a three-day benchmark for all organizations running exposed instances.
CISA added seven actively exploited vulnerabilities to the KEV catalog, including flaws in LiteLLM, Kestra, SonicWall SMA 1000, JFrog Artifactory, and Sangoma Switchvox. Microsoft and Wiz report that AI infrastructure gateways are now active targets for reverse shells, crypto miners, and API key theft.
On 29 July 2026, Broadcom published security advisory VMSA-2026-0006 addressing five vulnerabilities across VMware ESXi, vCenter Server, Workstation, and Fusion. vCenter Server is the central management plane for vSphere environments.
Security researcher Nightmare Eclipse released the ShieldBreak zero-day exploit for Microsoft Defender, claiming it bypasses the July patch for CVE-2026-50656. The flaw grants SYSTEM privileges on fully patched Windows 11 and Server 2025 when Defender is enabled.