Intră în contAbonează-te
CyberJurnal

Știri · Analize · Securitate cibernetică

Vulnerabilități și alerte

Alerte CVE

Monitorizare și căutare în alertele de vulnerabilitate din CISA KEV, NVD (NIST) și GitHub Advisories. Sunt afișate identificatorul CVE, severitatea și informațiile disponibile despre exploatare.

Ultima actualizare: 28 octombrie la 13:55
Toate (2122)🔥 Exploatate activ (106)⚡ Critice (CVSS 9.0+) (165)💀 Ransomware
CVE-2026-59310#CRITICALExploatat Activ⚠️ Ransomware

Broadcom VMware vCenter Path Traversal Vulnerability

🏢Broadcom· VMware vCenter🛡️CWE-22

Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.

⚠️ Directivă de Remediere (CISA KEV):

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Termen limită implementare: 21 august 2026

Sursă oficială:CISA KEV
Referințe:[Ref 1][Ref 2][Ref 3]
Deschide alerta oficială (CISA KEV)
CVE-2026-63077#CRITICALExploatat Activ⚠️ Ransomware

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

🏢JetBrains· TeamCity🛡️CWE-502

JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.

⚠️ Directivă de Remediere (CISA KEV):

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Termen limită implementare: 8 august 2026

Sursă oficială:CISA KEV
Referințe:[Ref 1][Ref 2][Ref 3]
Deschide alerta oficială (CISA KEV)
CVE-2026-20316#CRITICALExploatat Activ⚠️ Ransomware

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

🏢Cisco· Secure Firewall Management Center (FMC)🛡️CWE-259

Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.

⚠️ Directivă de Remediere (CISA KEV):

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Termen limită implementare: 1 august 2026

Sursă oficială:CISA KEV
Referințe:[Ref 1][Ref 2][Ref 3]
Deschide alerta oficială (CISA KEV)