CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel…

Číst originál na CISA Advisories →

9. 9. 2026 14:00 CZ · EN/orig

Fortinet Citrix Google Cisco veřejná správa US

tg: zneužíváno tg: zranitelnost tg: regulace

CVE v události 4

CVE	hodnocení	KEV	EPSS
CVE-2025-25249	7.4 3.1 · fortinet	KEV ✓	0.02
CVE-2026-19490	9.3 4.0 · NetScaler	KEV ✓	0.06
CVE-2026-20079	10.0 3.1 · cisco	KEV ✓	0.76
CVE-2026-87491	8.8 3.1 · CISA-ADP	KEV ✓	0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.