{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "CISA KEV Additions | East Bay Cyber",
 "home_page_url": "https://eastbaycyber.com/kev-dashboard/",
 "feed_url": "https://eastbaycyber.com/kev/feed.json",
 "description": "Newly listed CISA Known Exploited Vulnerabilities, with links to explainers.",
 "items": [
  {
   "id": "CVE-2026-75650",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75650",
   "title": "CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability",
   "content_text": "Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (Adobe Commerce and Magento) Added to CISA KEV 2026-09-08.",
   "date_published": "2026-09-08T00:00:00Z"
  },
  {
   "id": "CVE-2026-81963",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81963",
   "title": "CVE-2026-81963: Microsoft Windows Link Following Vulnerability",
   "content_text": "Microsoft Windows Link Following Vulnerability (Microsoft Windows) Added to CISA KEV 2026-09-08.",
   "date_published": "2026-09-08T00:00:00Z"
  },
  {
   "id": "CVE-2026-86218",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86218",
   "title": "CVE-2026-86218: N-able N-central Static Code Injection Vulnerability",
   "content_text": "N-able N-central Static Code Injection Vulnerability (N-able N-central) Added to CISA KEV 2026-09-08.",
   "date_published": "2026-09-08T00:00:00Z"
  },
  {
   "id": "CVE-2026-85880",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85880",
   "title": "CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability",
   "content_text": "Microsoft Windows Heap-Based Buffer Overflow Vulnerability (Microsoft Windows) Added to CISA KEV 2026-09-08.",
   "date_published": "2026-09-08T00:00:00Z"
  },
  {
   "id": "CVE-2026-85046",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85046",
   "title": "CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability",
   "content_text": "Google Chromium V8 Type Confusion Vulnerability (Google Chromium V8) Added to CISA KEV 2026-09-04.",
   "date_published": "2026-09-04T00:00:00Z"
  },
  {
   "id": "CVE-2026-59822",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59822",
   "title": "CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability",
   "content_text": "BerriAI LiteLLM Improper Authentication Vulnerability (BerriAI LiteLLM) Added to CISA KEV 2026-09-02.",
   "date_published": "2026-09-02T00:00:00Z"
  },
  {
   "id": "CVE-2026-48710",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710",
   "title": "CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability",
   "content_text": "Kludex Starlette HTTP Request/Response Smuggling Vulnerability (Kludex Starlette) Added to CISA KEV 2026-09-02.",
   "date_published": "2026-09-02T00:00:00Z"
  },
  {
   "id": "CVE-2026-49869",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49869",
   "title": "CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability",
   "content_text": "Kestra OSS OS Command Injection Vulnerability (Kestra Kestra OSS) Added to CISA KEV 2026-09-02.",
   "date_published": "2026-09-02T00:00:00Z"
  },
  {
   "id": "CVE-2026-82329",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82329",
   "title": "CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability",
   "content_text": "JFrog Artifactory Improper Authentication Vulnerability (JFrog Artifactory) Added to CISA KEV 2026-09-02.",
   "date_published": "2026-09-02T00:00:00Z"
  },
  {
   "id": "CVE-2026-9586",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9586",
   "title": "CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability",
   "content_text": "Sangoma Switchvox SQL Injection Vulnerability (Sangoma Switchvox) Added to CISA KEV 2026-09-02.",
   "date_published": "2026-09-02T00:00:00Z"
  },
  {
   "id": "CVE-2026-83548",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83548",
   "title": "CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability",
   "content_text": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (SonicWall SMA1000 Appliances) Added to CISA KEV 2026-09-02.",
   "date_published": "2026-09-02T00:00:00Z"
  },
  {
   "id": "CVE-2026-83549",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83549",
   "title": "CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability",
   "content_text": "SonicWall SMA1000 Appliances OS Command Injection Vulnerability (SonicWall SMA1000 Appliances) Added to CISA KEV 2026-09-02.",
   "date_published": "2026-09-02T00:00:00Z"
  },
  {
   "id": "CVE-2026-82078",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82078",
   "title": "CVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability",
   "content_text": "PaperCut NG/MF Unsafe Reflection Vulnerability (PaperCut NG/MF) Added to CISA KEV 2026-08-31.",
   "date_published": "2026-08-31T00:00:00Z"
  },
  {
   "id": "CVE-2026-81578",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81578",
   "title": "CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability",
   "content_text": "PaperCut NG/MF Missing Authentication for Critical Function Vulnerability (PaperCut NG/MF) Added to CISA KEV 2026-08-31.",
   "date_published": "2026-08-31T00:00:00Z"
  },
  {
   "id": "CVE-2023-49105",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49105",
   "title": "CVE-2023-49105: ownCloud Improper Authentication Vulnerability",
   "content_text": "ownCloud Improper Authentication Vulnerability (ownCloud ownCloud) Added to CISA KEV 2026-08-27.",
   "date_published": "2026-08-27T00:00:00Z"
  },
  {
   "id": "CVE-2026-53362",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53362",
   "title": "CVE-2026-53362: Linux Kernel Unspecified Vulnerability",
   "content_text": "Linux Kernel Unspecified Vulnerability (Linux Kernel) Added to CISA KEV 2026-08-27.",
   "date_published": "2026-08-27T00:00:00Z"
  },
  {
   "id": "CVE-2026-66384",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66384",
   "title": "CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability",
   "content_text": "JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability (JFrog Artifactory) Added to CISA KEV 2026-08-27.",
   "date_published": "2026-08-27T00:00:00Z"
  },
  {
   "id": "CVE-2021-23758",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23758",
   "title": "CVE-2021-23758: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability",
   "content_text": "Ajax.NET Professional Deserialization of Untrusted Data Vulnerability (Ajax.NET Professional Ajax.NET Professional) Added to CISA KEV 2026-08-26.",
   "date_published": "2026-08-26T00:00:00Z"
  },
  {
   "id": "CVE-2015-3246",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3246",
   "title": "CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability",
   "content_text": "Red Hat Libuser Race Condition Vulnerability (Red Hat Libuser) Added to CISA KEV 2026-08-26.",
   "date_published": "2026-08-26T00:00:00Z"
  },
  {
   "id": "CVE-2015-5287",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5287",
   "title": "CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability",
   "content_text": "Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability (Red Hat Automatic Bug Reporting Tool) Added to CISA KEV 2026-08-26.",
   "date_published": "2026-08-26T00:00:00Z"
  },
  {
   "id": "CVE-2022-0995",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0995",
   "title": "CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability",
   "content_text": "Linux Kernel Out-of-Bounds Write Vulnerability (Linux Kernel) Added to CISA KEV 2026-08-26.",
   "date_published": "2026-08-26T00:00:00Z"
  },
  {
   "id": "CVE-2026-8452",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8452",
   "title": "CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
   "content_text": "Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (Citrix NetScaler ADC and NetScaler Gateway) Added to CISA KEV 2026-08-26.",
   "date_published": "2026-08-26T00:00:00Z"
  },
  {
   "id": "CVE-2019-1068",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1068",
   "title": "CVE-2019-1068: Microsoft SQL Server Remote Code Execution Vulnerability",
   "content_text": "Microsoft SQL Server Remote Code Execution Vulnerability (Microsoft SQL Server) Added to CISA KEV 2026-08-26.",
   "date_published": "2026-08-26T00:00:00Z"
  },
  {
   "id": "CVE-2026-60004",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60004",
   "title": "CVE-2026-60004: Gitea Code Injection Vulnerability",
   "content_text": "Gitea Code Injection Vulnerability (Gitea Gitea) Added to CISA KEV 2026-08-25.",
   "date_published": "2026-08-25T00:00:00Z"
  },
  {
   "id": "CVE-2026-21962",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21962",
   "title": "CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability",
   "content_text": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability (Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in) Added to CISA KEV 2026-08-24.",
   "date_published": "2026-08-24T00:00:00Z"
  },
  {
   "id": "CVE-2026-73570",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73570",
   "title": "CVE-2026-73570: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability",
   "content_text": "Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (Synacor Zimbra Collaboration Suite (ZCS)) Added to CISA KEV 2026-08-21.",
   "date_published": "2026-08-21T00:00:00Z"
  },
  {
   "id": "CVE-2026-72530",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72530",
   "title": "CVE-2026-72530: TrueConf Server Code Injection Vulnerability",
   "content_text": "TrueConf Server Code Injection Vulnerability (TrueConf Server) Added to CISA KEV 2026-08-20.",
   "date_published": "2026-08-20T00:00:00Z"
  },
  {
   "id": "CVE-2026-72529",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72529",
   "title": "CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability",
   "content_text": "TrueConf Server Missing Authentication for Critical Function Vulnerability (TrueConf Server) Added to CISA KEV 2026-08-20.",
   "date_published": "2026-08-20T00:00:00Z"
  },
  {
   "id": "CVE-2026-64849",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64849",
   "title": "CVE-2026-64849: MLflow Server-Side Request Forgery Vulnerability",
   "content_text": "MLflow Server-Side Request Forgery Vulnerability (MLflow MLflow) Added to CISA KEV 2026-08-19.",
   "date_published": "2026-08-19T00:00:00Z"
  },
  {
   "id": "CVE-2026-33824",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33824",
   "title": "CVE-2026-33824: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability",
   "content_text": "Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (Microsoft Internet Key Exchange (IKE) Service Extensions) Added to CISA KEV 2026-08-18.",
   "date_published": "2026-08-18T00:00:00Z"
  },
  {
   "id": "CVE-2026-59310",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59310",
   "title": "CVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerability",
   "content_text": "Broadcom VMware vCenter Path Traversal Vulnerability (Broadcom VMware vCenter) Added to CISA KEV 2026-08-18.",
   "date_published": "2026-08-18T00:00:00Z"
  },
  {
   "id": "CVE-2026-55040",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55040",
   "title": "CVE-2026-55040: Microsoft SharePoint Weak Authentication Vulnerability",
   "content_text": "Microsoft SharePoint Weak Authentication Vulnerability (Microsoft SharePoint) Added to CISA KEV 2026-08-18.",
   "date_published": "2026-08-18T00:00:00Z"
  },
  {
   "id": "CVE-2026-65400",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65400",
   "title": "CVE-2026-65400: Apple macOS Improper Authentication Vulnerability",
   "content_text": "Apple macOS Improper Authentication Vulnerability (Apple macOS) Added to CISA KEV 2026-08-18.",
   "date_published": "2026-08-18T00:00:00Z"
  },
  {
   "id": "CVE-2025-62593",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62593",
   "title": "CVE-2025-62593: Ray-Project Ray Code Injection Vulnerability",
   "content_text": "Ray-Project Ray Code Injection Vulnerability (Ray-Project Ray) Added to CISA KEV 2026-08-17.",
   "date_published": "2026-08-17T00:00:00Z"
  },
  {
   "id": "CVE-2026-20349",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20349",
   "title": "CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability",
   "content_text": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ) Added to CISA KEV 2026-08-11.",
   "date_published": "2026-08-11T00:00:00Z"
  },
  {
   "id": "CVE-2026-68820",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68820",
   "title": "CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability",
   "content_text": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (Microsoft Windows Ancillary Function Driver for WinSock ) Added to CISA KEV 2026-08-11.",
   "date_published": "2026-08-11T00:00:00Z"
  },
  {
   "id": "CVE-2026-72898",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72898",
   "title": "CVE-2026-72898: Metabase SQL Injection Vulnerability",
   "content_text": "Metabase SQL Injection Vulnerability (Metabase Metabase) Added to CISA KEV 2026-08-11.",
   "date_published": "2026-08-11T00:00:00Z"
  },
  {
   "id": "CVE-2026-8037",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8037",
   "title": "CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability",
   "content_text": "Progress LoadMaster Command Injection Vulnerability (Progress LoadMaster) Added to CISA KEV 2026-08-07.",
   "date_published": "2026-08-07T00:00:00Z"
  },
  {
   "id": "CVE-2026-63077",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63077",
   "title": "CVE-2026-63077: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability",
   "content_text": "JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (JetBrains TeamCity) Added to CISA KEV 2026-08-05.",
   "date_published": "2026-08-05T00:00:00Z"
  },
  {
   "id": "CVE-2026-18556",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18556",
   "title": "CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability",
   "content_text": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (N-able N-central) Added to CISA KEV 2026-08-04.",
   "date_published": "2026-08-04T00:00:00Z"
  },
  {
   "id": "CVE-2026-34486",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34486",
   "title": "CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability",
   "content_text": "Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (Apache Tomcat) Added to CISA KEV 2026-08-04.",
   "date_published": "2026-08-04T00:00:00Z"
  },
  {
   "id": "CVE-2026-9198",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198",
   "title": "CVE-2026-9198: IBM Langflow Code Injection Vulnerability",
   "content_text": "IBM Langflow Code Injection Vulnerability (IBM Langflow) Added to CISA KEV 2026-08-04.",
   "date_published": "2026-08-04T00:00:00Z"
  },
  {
   "id": "CVE-2026-18577",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18577",
   "title": "CVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability",
   "content_text": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (N-able N-central) Added to CISA KEV 2026-08-03.",
   "date_published": "2026-08-03T00:00:00Z"
  },
  {
   "id": "CVE-2026-20316",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20316",
   "title": "CVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability",
   "content_text": "Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (Cisco Secure Firewall Management Center (FMC)) Added to CISA KEV 2026-07-29.",
   "date_published": "2026-07-29T00:00:00Z"
  },
  {
   "id": "CVE-2025-68686",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68686",
   "title": "CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability",
   "content_text": "Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (Fortinet FortiOS) Added to CISA KEV 2026-07-27.",
   "date_published": "2026-07-27T00:00:00Z"
  },
  {
   "id": "CVE-2026-16812",
   "url": "https://eastbaycyber.com/content/cve-2026-16812/",
   "title": "CVE-2026-16812: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability",
   "content_text": "Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability (Arista VeloCloud Orchestrator) Added to CISA KEV 2026-07-27.",
   "date_published": "2026-07-27T00:00:00Z"
  },
  {
   "id": "CVE-2026-16232",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16232",
   "title": "CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability",
   "content_text": "Check Point SmartConsole Improper Authentication Vulnerability (Check Point SmartConsole) Added to CISA KEV 2026-07-22.",
   "date_published": "2026-07-22T00:00:00Z"
  },
  {
   "id": "CVE-2026-50522",
   "url": "https://eastbaycyber.com/content/cve-2026-50522/",
   "title": "CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ",
   "content_text": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability  (Microsoft SharePoint) Added to CISA KEV 2026-07-22.",
   "date_published": "2026-07-22T00:00:00Z"
  },
  {
   "id": "CVE-2026-60137",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60137",
   "title": "CVE-2026-60137: WordPress Core SQL Injection Vulnerability",
   "content_text": "WordPress Core SQL Injection Vulnerability (WordPress Core) Added to CISA KEV 2026-07-21.",
   "date_published": "2026-07-21T00:00:00Z"
  },
  {
   "id": "CVE-2026-63030",
   "url": "https://eastbaycyber.com/content/cve-2026-63030/",
   "title": "CVE-2026-63030: WordPress Core Interpretation Conflict Vulnerability",
   "content_text": "WordPress Core Interpretation Conflict Vulnerability (WordPress Core) Added to CISA KEV 2026-07-21.",
   "date_published": "2026-07-21T00:00:00Z"
  }
 ]
}