@vulnerability.circl.lu.kev-catalogs@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
Aggregated feed of KEV entries across all catalogs explorable via this instance, conforming to GCVE BCP-07. Contains the most recent 20 entries.
Site URL: vulnerability.circl.lu/kev-catalogs
Feed URL: vulnerability.circl.lu/kev-catalogs/feed.rss
Posts: 38
Followers: 1
[CISA] CVE-2026-7273 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-7273
Published: September 21, 2026 00:00
CVE-2026-7273 Catalog: CISA Status: Confirmed Exploited: Yes Status Updated: 2026-09-21 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-21 Asserted: 2026-09-21 Scope Notes: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability |…
[Previdian] CVE-2026-32882 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-32882
Published: September 18, 2026 20:28
CVE-2026-32882 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 20:28 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha…
[Previdian] CVE-2017-20284 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2017-20284
Published: September 18, 2026 19:20
CVE-2017-20284 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 19:20 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig…
[Previdian] CVE-2025-39682 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2025-39682
Published: September 18, 2026 19:20
CVE-2025-39682 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 19:20 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: tls: fix handling of zero-length records on the rx_list | Affected: Linux /…
[Previdian] CVE-2023-54399 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2023-54399
Published: September 18, 2026 19:10
CVE-2023-54399 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 19:10 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: Hongjing e-HR < 8.2 SQL Injection via /servlet/codesettree | Affected:…
[Previdian] CVE-2021-48008 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2021-48008
Published: September 18, 2026 19:10
CVE-2021-48008 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 19:10 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: Chanjet CRM SQL Injection via get_usedspace.php | Affected: Chanjet…
[Previdian] CVE-2019-25776 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2019-25776
Published: September 18, 2026 19:10
CVE-2019-25776 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 19:10 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: Weaver E-cology SQL Injection via SyncUserInfo.jsp | Affected: Weaver…
[Previdian] CVE-2026-53266 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-53266
Published: September 18, 2026 14:30
CVE-2026-53266 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 14:30 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: netfilter: bridge: make ebt_snat ARP rewrite writable | Affected: Linux /…
[Previdian] CVE-2025-39964 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2025-39964
Published: September 18, 2026 14:30
CVE-2025-39964 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 14:30 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | Affected:…
[Previdian] CVE-2026-0769 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-0769
Published: September 18, 2026 07:40
CVE-2026-0769 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 07:40 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: Langflow eval_custom_component_code Eval Injection Remote Code Execution…
[CISA] CVE-2026-53266 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-53266
Published: September 18, 2026 00:00
CVE-2026-53266 Catalog: CISA Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: Linux Kernel Out-of-Bounds Write Vulnerability | Affected: Linux / Kernel |…
[CISA] CVE-2025-39964 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2025-39964
Published: September 18, 2026 00:00
CVE-2025-39964 Catalog: CISA Status: Confirmed Exploited: Yes Status Updated: 2026-09-18 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-18 Asserted: 2026-09-18 Scope Notes: Linux Kernel Race Condition Vulnerability | Affected: Linux / Kernel |…
[Previdian] CVE-2026-89013 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-89013
Published: September 17, 2026 16:42
CVE-2026-89013 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-17 16:42 UTC Evidence Sources: 1 First Seen: 2026-09-17 Asserted: 2026-09-17 Scope Notes: Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in…
[Previdian] CVE-2026-86538 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-86538
Published: September 17, 2026 16:27
CVE-2026-86538 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-17 16:27 UTC Evidence Sources: 1 First Seen: 2026-09-17 Asserted: 2026-09-17 Scope Notes: knowns before 0.30.0 Path Traversal via templateFile parameter | Affected:…
[Previdian] CVE-2022-25497 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2022-25497
Published: September 17, 2026 10:28
CVE-2022-25497 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-17 10:28 UTC Evidence Sources: 1 First Seen: 2026-09-17 Asserted: 2026-09-17 Scope Notes: CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy…
[Previdian] CVE-2021-24946 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2021-24946
Published: September 17, 2026 00:00
CVE-2021-24946 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-17 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-17 Asserted: 2026-09-17 Scope Notes: Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection |…
[Previdian] CVE-2016-15043 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2016-15043
Published: September 17, 2026 00:00
CVE-2016-15043 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-17 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-17 Asserted: 2026-09-17 Scope Notes: WP Mobile Detector <= 3.5 - Arbitrary File Upload | Affected: Websitez.com…
[Previdian] CVE-2026-40242 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-40242
Published: September 17, 2026 00:00
CVE-2026-40242 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-17 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-17 Asserted: 2026-09-17 Scope Notes: Arcane Unauthenticated SSRF with Conditional Response Reflection in…
[Previdian] CVE-2026-32255 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-32255
Published: September 17, 2026 00:00
CVE-2026-32255 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-17 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-17 Asserted: 2026-09-17 Scope Notes: Kan is Vulnerable to Unauthenticated SSRF via Attachment Download Endpoint…
[Previdian] CVE-2022-45362 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2022-45362
Published: September 17, 2026 00:00
CVE-2022-45362 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-17 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-17 Asserted: 2026-09-17 Scope Notes: WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server…
[Previdian] CVE-2026-76460 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-76460
Published: September 16, 2026 19:21
CVE-2026-76460 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-16 19:21 UTC Evidence Sources: 1 First Seen: 2026-09-16 Asserted: 2026-09-16 Scope Notes: Cisco Identity Services Engine Authentication Bypass Vulnerability |…
[Previdian] CVE-2026-54196 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-54196
Published: September 16, 2026 11:50
CVE-2026-54196 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-16 11:50 UTC Evidence Sources: 1 First Seen: 2026-09-16 Asserted: 2026-09-16 Scope Notes: WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation…
[Previdian] CVE-2026-58704 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-58704
Published: September 16, 2026 08:15
CVE-2026-58704 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-16 08:15 UTC Evidence Sources: 1 First Seen: 2026-09-16 Asserted: 2026-09-16 Scope Notes: In Cellular Modem, there is a possible permission bypass due to a logic…
[Previdian] CVE-2026-5430 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-5430
Published: September 16, 2026 05:18
CVE-2026-5430 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-16 05:18 UTC Evidence Sources: 1 First Seen: 2026-09-16 Asserted: 2026-09-16 Scope Notes: Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products…
[CISA] CVE-2026-58704 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-58704
Published: September 16, 2026 00:00
CVE-2026-58704 Catalog: CISA Status: Confirmed Exploited: Yes Status Updated: 2026-09-16 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-16 Asserted: 2026-09-16 Scope Notes: Google Pixel Improper Authorization Vulnerability | Affected: Google / Pixel |…
[Previdian] CVE-2026-39364 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-39364
Published: September 15, 2026 15:40
CVE-2026-39364 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-15 15:40 UTC Evidence Sources: 1 First Seen: 2026-09-15 Asserted: 2026-09-15 Scope Notes: Vite has a `server.fs.deny` bypass with queries | Affected: Vitejs / vite,…
[Previdian] CVE-2016-10760 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2016-10760
Published: September 15, 2026 00:00
CVE-2016-10760 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-15 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-15 Asserted: 2026-09-15 Scope Notes: On Seowon Intech routers, there is a Command Injection vulnerability in…
[Previdian] CVE-2017-7876 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2017-7876
Published: September 15, 2026 00:00
CVE-2017-7876 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-15 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-15 Asserted: 2026-09-15 Scope Notes: This command injection vulnerability in QTS allows attackers to run…
[Previdian] CVE-2025-9603 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2025-9603
Published: September 15, 2026 00:00
CVE-2025-9603 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-15 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-15 Asserted: 2026-09-15 Scope Notes: Telesquare TLR-2005KSH internet.cgi command injection | Affected: Telesquare…
[Previdian] CVE-2026-27540 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-27540
Published: September 14, 2026 18:49
CVE-2026-27540 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-14 18:49 UTC Evidence Sources: 1 First Seen: 2026-09-14 Asserted: 2026-09-14 Scope Notes: WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary…
[Previdian] CVE-2026-76461 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-76461
Published: September 14, 2026 16:00
CVE-2026-76461 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-14 16:00 UTC Evidence Sources: 1 First Seen: 2026-09-14 Asserted: 2026-09-14 Scope Notes: Cisco Secure Email Gateway SQL Injection Vulnerability | Affected: Cisco /…
[Previdian] CVE-2026-51990 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-51990
Published: September 14, 2026 13:33
CVE-2026-51990 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-14 13:33 UTC Evidence Sources: 1 First Seen: 2026-09-14 Asserted: 2026-09-14 Scope Notes: Sogou Input Method One-Click Remote Code Execution via sgbiz Protocol…
[Previdian] CVE-2026-23536 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-23536
Published: September 14, 2026 07:22
CVE-2026-23536 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-14 07:22 UTC Evidence Sources: 1 First Seen: 2026-09-14 Asserted: 2026-09-14 Scope Notes: Feast: unauthenticated arbitrary file read | Affected: Red Hat / Red Hat…
[Previdian] CVE-2026-55786 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-55786
Published: September 14, 2026 07:22
CVE-2026-55786 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-14 07:22 UTC Evidence Sources: 1 First Seen: 2026-09-14 Asserted: 2026-09-14 Scope Notes: Flyto2 Core - Unauthenticated OS command execution via HTTP MCP | Affected:…
[CISA] CVE-2026-76461 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-76461
Published: September 14, 2026 00:00
CVE-2026-76461 Catalog: CISA Status: Confirmed Exploited: Yes Status Updated: 2026-09-14 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-14 Asserted: 2026-09-14 Scope Notes: Cisco Secure Email Gateway SQL Injection Vulnerability | Affected: Cisco /…
[Previdian] CVE-2025-32969 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2025-32969
Published: September 13, 2026 00:00
CVE-2025-32969 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-13 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-13 Asserted: 2026-09-13 Scope Notes: org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query…
[Previdian] CVE-2021-24827 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2021-24827
Published: September 13, 2026 00:00
CVE-2021-24827 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-13 00:00 UTC Evidence Sources: 1 First Seen: 2026-09-13 Asserted: 2026-09-13 Scope Notes: Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection | Affected: Asgaros…
[Previdian] CVE-2026-85706 - Confirmed Exploitation
https://vulnerability.circl.lu/vuln/CVE-2026-85706
Published: September 11, 2026 20:01
CVE-2026-85706 Catalog: Previdian Status: Confirmed Exploited: Yes Status Updated: 2026-09-11 20:01 UTC Evidence Sources: 1 First Seen: 2026-09-11 Asserted: 2026-09-11 Scope Notes: Improper Limitation of a Pathname to a Restricted Directory ('Path…