CVE-2026-34909 — Ubiquiti UniFi OS Path Traversal Vulnerability
Ubiquiti UniFi OS Path Traversal Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…
Tag: CISA KEV
CVE-2026-34908 — Ubiquiti UniFi OS Improper Access Control Vulnerability
Ubiquiti UniFi OS Improper Access Control Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security…
CVE-2026-20253 — Splunk Enterprise Missing Authentication for Critical Function Vulnerability
Splunk Enterprise Missing Authentication for Critical Function Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing…
CVE-2026-48907 — Widget Factory Joomla Content Editor Improper Access Control Vulnerability
Widget Factory Joomla Content Editor Improper Access Control Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04…
CVE-2026-20262 — Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04…
CVE-2026-10520 — Ivanti Sentry OS Command Injection Vulnerability
Ivanti Sentry OS Command Injection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…
CVE-2026-7473 — Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud…
CVE-2026-20245 — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for…
CVE-2026-28318 — SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use…
CVE-2026-45247 — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud…