Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalog NVD 48-hour CVEs Kythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 769–792 of 1,769

CISA KEVAdded Sep 19, 2023

CVE-2023-28434: MinIO Security Feature Bypass Vulnerability

MinIO · MinIO

MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket` to conduct privilege escalation. To carry out this attack, the attacker…

Federal remediation due Oct 10, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 18, 2023

CVE-2022-22265: Samsung Mobile Devices Use-After-Free Vulnerability

Samsung · Mobile Devices

Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.

Federal remediation due Oct 9, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 18, 2023

CVE-2021-3129: Laravel Ignition File Upload Vulnerability

Laravel · Ignition

Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().

Federal remediation due Oct 9, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 18, 2023

CVE-2017-6884: Zyxel EMG2926 Routers Command Injection Vulnerability

Zyxel · EMG2926 Routers

Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.

Federal remediation due Oct 9, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 18, 2023

CVE-2014-8361: Realtek SDK Improper Input Validation Vulnerability

Realtek · SDK

Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

Federal remediation due Oct 9, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 14, 2023

CVE-2023-26369: Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

Adobe · Acrobat and Reader

Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.

Federal remediation due Oct 5, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 13, 2023

CVE-2023-4863: Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Google · Chromium WebP

Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.

Federal remediation due Oct 4, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 13, 2023

CVE-2023-35674: Android Framework Privilege Escalation Vulnerability

Android · Framework

Android Framework contains an unspecified vulnerability that allows for privilege escalation.

Federal remediation due Oct 4, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 13, 2023

CVE-2023-20269: Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

Cisco · Adaptive Security Appliance and Firepower Threat Defense

Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN…

Federal remediation due Oct 4, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.

View in the CISA KEV catalog →

CISA KEVAdded Sep 12, 2023

CVE-2023-36802: Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

Microsoft · Streaming Service Proxy

Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.

Federal remediation due Oct 3, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 12, 2023

CVE-2023-36761: Microsoft Word Information Disclosure Vulnerability

Microsoft · Word

Microsoft Word contains an unspecified vulnerability that allows for information disclosure.

Federal remediation due Oct 3, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 11, 2023

CVE-2023-41064: Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

Apple · iOS, iPadOS, and macOS

Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.

Federal remediation due Oct 2, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 11, 2023

CVE-2023-41061: Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

Apple · iOS, iPadOS, and watchOS

Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064.

Federal remediation due Oct 2, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Sep 6, 2023

CVE-2023-33246: Apache RocketMQ Command Execution Vulnerability

Apache · RocketMQ

Several components of Apache RocketMQ, including NameServer, Broker, and Controller, are exposed to the extranet and lack permission verification. An attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running…

Federal remediation due Sep 27, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Aug 24, 2023

CVE-2023-38831: RARLAB WinRAR Code Execution Vulnerability

RARLAB · WinRAR

RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.

Federal remediation due Sep 14, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Aug 24, 2023

CVE-2023-32315: Ignite Realtime Openfire Path Traversal Vulnerability

Ignite Realtime · Openfire

Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.

Federal remediation due Sep 14, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Aug 22, 2023

CVE-2023-38035: Ivanti Sentry Authentication Bypass Vulnerability

Ivanti · Sentry

Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.

Federal remediation due Sep 12, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Aug 22, 2023

CVE-2023-27532: Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

Veeam · Backup & Replication

Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker…

Federal remediation due Sep 12, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Aug 21, 2023

CVE-2023-26359: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusion

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.

Federal remediation due Sep 11, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Aug 16, 2023

CVE-2023-24489: Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

Citrix · Content Collaboration

Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers.

Federal remediation due Sep 6, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Aug 9, 2023

CVE-2023-38180: Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

Microsoft · .NET Core and Visual Studio

Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).

Federal remediation due Aug 30, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Aug 7, 2023

CVE-2017-18368: Zyxel P660HN-T1A Routers Command Injection Vulnerability

Zyxel · P660HN-T1A Routers

Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the remote_host parameter of the ViewLog.asp page.

Federal remediation due Aug 28, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 31, 2023

CVE-2023-35081: Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM)

Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).

Federal remediation due Aug 21, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 27, 2023

CVE-2023-37580: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.

Federal remediation due Aug 17, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Nov 8, 2026, 7:25 AM GMT+0000Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 937–960 of 1,041