CyberIL – לדף הבית

פגיעויות שמנוצלות עכשיו (CISA KEV)

הקטלוג של CISA מרכז פגיעויות שיש עדות שמנוצלות בפועל. אם אחד המוצרים כאן קיים אצלכם, הטיפול בו קודם לכל ציון CVSS.

מוצגות פגיעויות שנוספו ב-30 הימים האחרונים. מקור: CISA Known Exploited Vulnerabilities Catalog.

פגיעויות שנוספו לאחרונה לקטלוג CISA KEV
CVEספק / מוצרתיאורנוסףשימוש בכופרה
CVE-2026-118527Ivanti Connect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerabilityלא ידוע
CVE-2026-111357Ivanti Connect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerabilityלא ידוע
CVE-2026-97229GitLab Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerabilityלא ידוע
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerabilityלא ידוע
CVE-2026-41709Broadcom VMware ESXBroadcom VMWare ESX Insufficient Logging Vulnerabilityלא ידוע
CVE-2026-46300Linux KernelLinux Kernel Missing Initialization of a Variable Vulnerabilityלא ידוע
CVE-2026-48356Adobe Commerce and MagentoAdobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerabilityלא ידוע
CVE-2026-111497Google BrotliGoogle Brotli Unchecked Return Value Vulnerabilityלא ידוע
CVE-2026-109618PHP Group PHPPHP Memory Corruption Vulnerabilityלא ידוע
CVE-2026-109619PHP Group PHPPHP Stale Internal Request-State Vulnerabilityלא ידוע
CVE-2026-114625Arista VeloCloud OrchestratorArista VeloCloud Orchestrator SQL Injection Vulnerabilityלא ידוע
CVE-2026-110447Collabora Collabora Online – Built-in CODE ServerCollabora Online – Built-in CODE Server OS Command Injection Vulnerabilityלא ידוע
CVE-2026-106931EG Secure Solutions SiteGuard Server EditionEG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerabilityלא ידוע
CVE-2026-96656Plex Media ServerPlex Media Server External Control of File Name or Path Vulnerabilityלא ידוע
CVE-2026-96655Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerabilityלא ידוע
CVE-2026-96654Plex Media ServerPlex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerabilityלא ידוע
CVE-2026-96652Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerabilityלא ידוע
CVE-2026-110936Siemens Software CenterSiemens Software Center Uncontrolled Search Path Element Vulnerabilityלא ידוע
CVE-2026-102764BeyondTrust Remote SupportBeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerabilityלא ידוע
CVE-2025-61624Fortinet Multiple ProductsFortinet Multiple Products Path Traversal Vulnerabilityלא ידוע
CVE-2026-21589Atlassian Multiple ProductsAtlassian Multiple Products Files or Directories Accessible to External Parties Vulnerabilityלא ידוע
CVE-2026-105134Ahsay AhsayCBSAhsay AhsayCBS Command Injection Vulnerabilityלא ידוע
CVE-2026-76519Cisco Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerabilityלא ידוע
CVE-2026-105133Ahsay AhsayCBSAhsay AhsayCBS Improper Authentication Vulnerabilityלא ידוע
CVE-2026-0322Palo Alto Networks PAN-OSPalo Alto Networks PAN-OS Code Injection Vulnerabilityלא ידוע
CVE-2026-104935Ivanti Connect SecureIvanti Connect Secure Authentication Bypass by Spoofing Vulnerabilityלא ידוע
CVE-2026-96951Microsoft WindowsMicrosoft Windows Command Injection Vulnerabilityלא ידוע
CVE-2015-5477ISC BINDISC BIND Data Processing Errors Vulnerabilityלא ידוע
CVE-2016-3081Apache StrutsApache Struts Command Injection Vulnerabilityלא ידוע
CVE-2023-22894Strapi StrapiStrapi Cleartext Storage of Sensitive Information Vulnerabilityלא ידוע
CVE-2021-3199ONLYOFFICE DocsONLYOFFICE Docs Server Path Traversal Vulnerabilityלא ידוע
CVE-2015-3306ProFTPD ProFTPDProFTPD Improper Access Control Vulnerabilityלא ידוע
CVE-2026-88779Citrix NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerabilityלא ידוע

איך להשתמש ב-KEV לתעדוף טלאים – מדריך