CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-31431
2026年5月1日，美国网络安全与基础设施安全局（CISA）将一个新的漏洞CVE-2026-31431添加到其已知被利用漏洞（KEV）目录中。该漏洞存在于Linux内核中，属于“资源在不同领域之间错误转移”类型，可被恶意网络行为者用作频繁的
#cisa
共收录 92 条相关情报。
← 返回所有主题Careful Adoption of Agentic AI Services
CISA, in collaboration with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and other
ABB AWIN Gateways
CVE-2025-13777 · CVE-2025-13778
2026年4月30日，CISA发布ICS Advisory ICSA-26-120-05，通报ABB AWIN网关中存在两个安全漏洞。受影响产品包括：运行固件版本2.0-0和2.0-1的ABB AWIN GW100 rev.2，以及运行固件
ABB Ability OPTIMAX
CVE-2025-14510
2026年4月30日，美国网络安全与基础设施安全局（CISA）发布关于ABB Ability OPTIMAX的工业控制系统（ICS）安全通告，涉及一个高危漏洞（CVE-2025-14510），CVSS 3.1评分为8.1。该漏洞存在于ABB
ABB PCM600
CVE-2018-1002208
ABB PCM600 是一款用于保护和控制 IED（智能电子设备）的管理软件，广泛应用于全球关键制造业。CISA 发布 ICS 公告（ICSA-26-120-02），披露了 ABB PCM600 中存在一个路径遍历漏洞（CVE-2018-1
ABB Edgenius Management Portal
CVE-2025-10571
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to send a specially crafted mess
ABB Ability Symphony Plus Engineering
CVE-2023-39417 · CVE-2023-5869
View CSAF Summary ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-41940
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e
ABB System 800xA, Symphony Plus IEC 61850
CVE-2025-3756
View CSAF Summary This vulnerability was privately reported relating to ABB’s implementation of the IEC 61850 communicat
Adapting Zero Trust Principles to Operational Technology
美国网络安全和基础设施安全局（CISA）联合战争部、能源部、联邦调查局和国务院发布了《将零信任原则应用于操作技术》的联合指南。该指南旨在帮助组织将零信任（ZT）网络安全方法应用于操作技术（OT）环境。零信任是一种现代、自适应的网络安全方法，
NSA GRASSMARLIN
CVE-2026-6807
[MOCK] 这是一个威胁情报的伪摘要: NSA GRASSMARLIN
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CVE-2026-32202 · CVE-2024-1708
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active