KEV ✓ EPSS 0.99 EPSS k 18. 10. 2026 náprava do 13. 3. 2026
zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost
Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu. Fakta o samotném CVE jsou nahoře.
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. [...]
CVE-2020-12641 * CVE-2020-35730 * CVE-2021-44026 * CVE-2023-5631 * CVE-2025-49113 * CVE-2025-68461 * CVE-2026-48842 * Roundcube US
Key Points Check Point Research is tracking a long‑running campaign called Operation Dream Job, targeting organizations worldwide, with a particular focus on the defense sector. The campaign is affiliated to DPRK-linked Lazarus group and its latest wave focuses on the defense sector in Europe and India. In the latest variant of the Operation Dream Job campaign, the threat actor distributed SecurityPDF, a modified PDF viewer designed to open attacker-crafted PDF documents and execute a new…
KEV ✓ EPSS 0.99 CVE-2025-49113 CVE-2026-68820 Microsoft obrana IL