ช่องโหว่ที่อยู่ใน CISA KEV
ช่องโหว่ที่ CISA ยืนยันว่าถูกใช้โจมตีจริงแล้ว (Known Exploited Vulnerabilities) ควรแก้ไขก่อนรายการอื่น
พบ 19 ประกาศ
-
cisco-sa-asaftd-tunnel-dos-s6mgkb75
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
KEV High8.6 -
cisco-sa-oct2026-node-js-Jj3SQ19u
Cisco · NX-OS, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Identity Services Engine Software, Cisco Secure Firewall Management Center (FMC), Cisco Secure Firewall Threat Defense (FTD) Software, Cisco Secure Endpoint, Cisco Firepower Extensible Operating System (FXOS), Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Data Center Network Manager (DCNM), Cisco Catalyst Center, Cisco License On-Prem, Cisco AppDynamics, Cisco Virtualized Infrastructure Manager, Cisco CloudCenter, Cisco ISE Passive Identity Connector, Cisco Secure Endpoint Private Cloud Administration Portal, Cisco Secure Endpoint Private Cloud Console, Cisco Secure Malware Analytics, Cisco Smart License Utility
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
KEV Critical7.4 -
CVE-2026-111497
Palo Alto Networks · PAN-OS, Prisma Cloud - Application Security Transporter Client
Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products
KEV Critical9.2 -
FG-IR-26-187
Fortinet
Node2Shell CVEs
KEV Critical9.8 -
cisco-sa-php-october26-Jj384Daq
Cisco · NA
Vulnerabilities in PHP Affecting Cisco Products: October 2026
KEV Critical -
CVE-2026-109618
Palo Alto Networks · PAN-OS, Cortex XCORE (SaaS), WildFire Cloud
Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
KEV Critical9.2 -
FG-IR-26-186
Fortinet · FortiSOAR PaaS, FortiSOAR on-premise
PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
KEV Critical5.3 -
cisco-sa-esa-afw-zqYJkjxp
Cisco · Cisco Secure Email
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
KEV Critical9.8 -
CVE-2026-0322
Palo Alto Networks · PAN-OS
PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
KEV High8.6 -
FG-IR-26-175
Fortinet · FortiMail
Improper limitation of a pathname to a restricted directory
KEV Critical9.8 -
cisco-sa-sdwan-webauth-xr8beuuU
Cisco · Cisco Catalyst SD-WAN Manager, Cisco Catalyst SD-WAN Manager 20.9.3_LI_ Images, Cisco Catalyst SD-WAN Manager 20.9.7.1_LI _Images, Cisco Catalyst SD-WAN Manager 20.9.7_LI _Images, Cisco Catalyst SD-WAN Manager 20.15.3_ LI _Images, Cisco Catalyst SD-WAN Manager 20.12.5.4_LI_ Images
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
KEV Critical9.8 -
cisco-sa-ISE-ABP-VNSW7Tn5
Cisco · Cisco Identity Services Engine Software, Cisco ISE Passive Identity Connector, Cisco Identity Services Engine Software 3.1.0 p8, Cisco Identity Services Engine Software 3.1.0 p9, Cisco Identity Services Engine Software 3.1.0 p11, Cisco Identity Services Engine Software 3.2.0 p7, Cisco Identity Services Engine Software 3.2 Patch, Cisco Identity Services Engine Software 3.3 Patch, Cisco Identity Services Engine Software 3.4 Patch, Cisco Identity Services Engine Software 3.5 Patch, Cisco Identity Services Engine Software 3.1.0 p10
Cisco Identity Services Engine Authentication Bypass Vulnerability
KEV Critical10.0 -
cisco-sa-esa-inj-2bLVGmhX
Cisco · Cisco Secure Email
Cisco Secure Email Gateway SQL Injection Vulnerability
KEV Critical9.8 -
cisco-sa-asaftd-vpn-dos-dzv4mQFF
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
KEV High8.6 -
cisco-sa-fmc-static-cred-BET3Cjh
Cisco · Cisco Secure Firewall Management Center (FMC)
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
KEV Medium5.3 -
CVE-2026-0257
Palo Alto Networks · PAN-OS, Prisma Access
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
KEV Critical7.8 -
CVE-2026-0300
Palo Alto Networks · PAN-OS
PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
KEV Critical9.3 -
cisco-sa-onprem-fmc-authbypass-5JPp45V2
Cisco · Cisco Secure Firewall Management Center (FMC)
Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
KEV Critical10.0 -
cisco-sa-sdwan-rpa-EHchtZk
Cisco · Cisco Catalyst SD-WAN Manager, Cisco Catalyst SD-WAN Manager 20.9.3_LI_ Images, Cisco Catalyst SD-WAN Manager 20.9.7.1_LI _Images, Cisco Catalyst SD-WAN Manager 20.9.7_LI _Images, Cisco Catalyst SD-WAN Manager 20.15.3_ LI _Images
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
KEV Critical10.0