CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-42897
CISA于2026年5月15日将其已知被利用漏洞（KEV）目录新增一个漏洞CVE-2026-42897，该漏洞为Microsoft Exchange Server中的跨站脚本（XSS）漏洞。CISA根据已发现的在野利用证据将该漏洞列入KEV
#conti
共收录 115 条相关情报。
← 返回所有主题Kazuar: Anatomy of a nation-state botnet
Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant de
Siemens Siemens ROS#
CVE-2026-41551
CISA 发布了一份关于 Siemens ROS# 的安全公告 (ICSA-26-134-08)，指出该产品存在一个路径遍历漏洞 (CVE-2026-41551, CVSS 9.1 严重)。该漏洞存在于 ROS# 的 file_server
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-20182
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e
Sweet Security Launches Agentic AI Red Teaming to Counter ‘Mythos Moment’
New “Sweet Attack” platform uses runtime intelligence and continuous agentic red teaming to identify exploitable attack
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-42208
2026年5月8日，美国网络安全与基础设施安全局（CISA）在其已知被利用漏洞（KEV）目录中新增了一个漏洞CVE-2026-42208。该漏洞是BerriAI LiteLLM中的一个SQL注入漏洞，已被发现存在积极利用的证据。LiteLL
MAXHUB Pivot Client Application
CVE-2026-6411
CISA于2026年5月7日发布ICS公告（ICSA-26-127-01），披露MAXHUB Pivot客户端应用（版本低于v1.36.2）存在一个高危漏洞（CVE-2026-6411），CVSS v3.1基础评分7.3。该漏洞源于应用程序
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-6973
2026年5月7日，美国网络安全和基础设施安全局（CISA）将CVE-2026-6973添加到已知被利用漏洞（KEV）目录中。该漏洞影响Ivanti Endpoint Manager Mobile（EPMM），属于不当输入验证漏洞，已被攻击
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-0300
2026年5月6日，美国网络安全与基础设施安全局（CISA）在其已知被利用漏洞（KEV）目录中新增了一个漏洞（CVE-2026-0300）。该漏洞存在于Palo Alto Networks的PAN-OS操作系统，属于越界写入类型，攻击者可能
Hitachi Energy PCM600
CVE-2018-1002208
View CSAF Summary Hitachi Energy is aware of a vulnerability that affects the Hitachi Energy PCM600 product versions lis
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-31431
2026年5月1日，美国网络安全与基础设施安全局（CISA）将一个新的漏洞CVE-2026-31431添加到其已知被利用漏洞（KEV）目录中。该漏洞存在于Linux内核中，属于“资源在不同领域之间错误转移”类型，可被恶意网络行为者用作频繁的
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-41940
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e
ABB System 800xA, Symphony Plus IEC 61850
CVE-2025-3756
View CSAF Summary This vulnerability was privately reported relating to ABB’s implementation of the IEC 61850 communicat
Adapting Zero Trust Principles to Operational Technology
美国网络安全和基础设施安全局（CISA）联合战争部、能源部、联邦调查局和国务院发布了《将零信任原则应用于操作技术》的联合指南。该指南旨在帮助组织将零信任（ZT）网络安全方法应用于操作技术（OT）环境。零信任是一种现代、自适应的网络安全方法，
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CVE-2026-32202 · CVE-2024-1708
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active