home.social
Sign in Create account

#cisa_kev — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cisa_kev, aggregated by home.social.

  1. ZEN SecDB @[email protected] ·

    🚨 [CISA-2026:0430] CISA Adds One Known Exploited Vulnerability to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2026-41940 (secdb.nttzen.cloud/cve/detail/)
    - Name: WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: WebPros
    - Product: cPanel & WHM and WP2 (WordPress Squared)
    - Notes: support.cpanel.net/hc/en-us/ar ; docs.cpanel.net/release-notes/ ; docs.wpsquared.com/changelogs/ ; nvd.nist.gov/vuln/detail/CVE-2;

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260430 #cisa20260430 #cve_2026_41940 #cve202641940

    #secdb #infosec #cve #cisa_kev #cisa_20260430 #cisa20260430
  2. ZEN SecDB @[email protected] ·

    🚨 [CISA-2026:0430] CISA Adds One Known Exploited Vulnerability to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2026-41940 (secdb.nttzen.cloud/cve/detail/)
    - Name: WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: WebPros
    - Product: cPanel & WHM and WP2 (WordPress Squared)
    - Notes: support.cpanel.net/hc/en-us/ar ; docs.cpanel.net/release-notes/ ; docs.wpsquared.com/changelogs/ ; nvd.nist.gov/vuln/detail/CVE-2;

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260430 #cisa20260430 #cve_2026_41940 #cve202641940

    #cve202641940 #cve_2026_41940 #cisa20260430 #cisa_20260430 #cisa_kev #cve
  3. ZEN SecDB @[email protected] ·

    🚨 [CISA-2025:1110] CISA Adds One Known Exploited Vulnerability to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2025-21042 (secdb.nttzen.cloud/cve/detail/)
    - Name: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Samsung
    - Product: Mobile Devices
    - Notes: security.samsungmobile.com/sec ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20251110 #cisa20251110 #cve_2025_21042 #cve202521042

    #secdb #infosec #cve #cisa_kev #cisa_20251110 #cisa20251110
  4. ZEN SecDB @[email protected] ·

    🚨 [CISA-2025:1110] CISA Adds One Known Exploited Vulnerability to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2025-21042 (secdb.nttzen.cloud/cve/detail/)
    - Name: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Samsung
    - Product: Mobile Devices
    - Notes: security.samsungmobile.com/sec ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20251110 #cisa20251110 #cve_2025_21042 #cve202521042

    #secdb #infosec #cve #cisa_kev #cisa_20251110 #cisa20251110
  5. ZEN SecDB @[email protected] ·

    🚨 [CISA-2025:1110] CISA Adds One Known Exploited Vulnerability to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2025-21042 (secdb.nttzen.cloud/cve/detail/)
    - Name: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Samsung
    - Product: Mobile Devices
    - Notes: security.samsungmobile.com/sec ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20251110 #cisa20251110 #cve_2025_21042 #cve202521042

    #cve202521042 #cve_2025_21042 #cisa20251110 #cisa_20251110 #cisa_kev #cve
  6. ZEN SecDB @[email protected] ·

    [CISA-2025:0923] CISA Adds One Known Exploited Vulnerability to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    CVE-2025-10585 (secdb.nttzen.cloud/cve/detail/)
    - Name: Google Chromium V8 Type Confusion Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Google
    - Product: Chromium V8
    - Notes: chromereleases.googleblog.com/ ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CISA_KEV #cisa_20250923 #cve_2025_10585

    #secdb #infosec #cisa_kev #cisa_20250923 #cve_2025_10585