Atualizado diariamente · fontes oficiais

Radar de Segurança

Vulnerabilidades (CVE) que estão sendo exploradas ativamente, segundo o catálogo KEV da CISA, com severidade CVSS e probabilidade de exploração (EPSS).

34exploradas nos últimos 30 dias

13críticas (CVSS ≥ 9)

0usadas em ransomware

1768no catálogo KEV

CVE-2026-48356 Crítica · CVSS 9.3 no catálogo em 27/10/2026

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

Adobe · Commerce and Magento · CWE-434

Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. EN

CVE-2026-111497 Crítica · CVSS 9.2 no catálogo em 27/10/2026

Google Brotli Unchecked Return Value Vulnerability

Google · Brotli · CWE-252, CWE-787

Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. EN

CVE-2026-21589 Crítica · CVSS 9.3 no catálogo em 15/10/2026

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Atlassian · Multiple Products · CWE-552

Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions. EN

CVE-2026-76519 Crítica · CVSS 9.8 no catálogo em 14/10/2026

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Cisco · Secure Email Gateway · CWE-23

Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. EN

Quer saber se o seu ambiente está exposto?

Avaliamos versões, acessos e integrações do seu ERP e priorizamos as correções.

Falar com um especialista

Fontes: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database e FIRST EPSS. Conteúdo informativo; siga sempre o aviso e a correção do fabricante.

This product uses the NVD API but is not endorsed or certified by the NVD.