Radar de Segurança

CVE-2026-20316 Severidade em análise Ransomware no catálogo em 29/07/2026

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Cisco · Secure Firewall Management Center (FMC) · CWE-259

Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. EN

CVE-2026-15410 Severidade em análise Ransomware no catálogo em 14/07/2026

SonicWall SMA1000 Appliances Code Injection Vulnerability

SonicWall · SMA1000 Appliances · CWE-94

SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands. EN

CVE-2026-15409 Severidade em análise Ransomware no catálogo em 14/07/2026

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall · SMA1000 Appliances · CWE-918

SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location. EN

CVE-2026-45659 Severidade em análise Ransomware no catálogo em 01/07/2026

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint Server · CWE-502

Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network. EN

CVE-2026-35273 Severidade em análise Ransomware no catálogo em 12/06/2026

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Oracle · PeopleSoft Enterprise PeopleTools · CWE-306

Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools. EN

CVE-2026-0257 Severidade em análise Ransomware no catálogo em 29/05/2026

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · CWE-565

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection. EN

CVE-2026-33825 Severidade em análise Ransomware no catálogo em 22/04/2026

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Microsoft · Defender · CWE-1220

Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally. EN

CVE-2025-60710 Severidade em análise Ransomware no catálogo em 13/04/2026

Microsoft Windows Link Following Vulnerability

Microsoft · Windows · CWE-59

Microsoft Windows contains a link following vulnerability that allows for privilege escalation EN

CVE-2023-21529 Severidade em análise Ransomware no catálogo em 13/04/2026

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Microsoft · Exchange Server · CWE-502

Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. EN

CVE-2026-20131 Severidade em análise Ransomware no catálogo em 19/03/2026

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Cisco · Secure Firewall Management Center (FMC) · CWE-502

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. EN

CVE-2025-61884 Severidade em análise Ransomware no catálogo em 20/10/2025

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Oracle · E-Business Suite · CWE-918

Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication. EN

CVE-2025-61882 Severidade em análise Ransomware no catálogo em 06/10/2025

Oracle E-Business Suite Unspecified Vulnerability

Oracle · E-Business Suite

Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing. EN

CVE-2021-43226 Severidade em análise Ransomware no catálogo em 06/10/2025

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms. EN

CVE-2025-49706 Severidade em análise Ransomware no catálogo em 22/07/2025

Microsoft SharePoint Improper Authentication Vulnerability

Microsoft · SharePoint · CWE-287

Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706. EN

CVE-2025-49704 Severidade em análise Ransomware no catálogo em 22/07/2025

Microsoft SharePoint Code Injection Vulnerability

Microsoft · SharePoint · CWE-94

Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704. EN

CVE-2025-53770 Severidade em análise Ransomware no catálogo em 20/07/2025

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint · CWE-502

Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704. EN

CVE-2025-5777 Severidade em análise Ransomware no catálogo em 10/07/2025

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Citrix · NetScaler ADC and Gateway · CWE-125

Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server. EN

CVE-2019-6693 Severidade em análise Ransomware no catálogo em 25/06/2025

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Fortinet · FortiOS · CWE-798

Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key. EN

CVE-2025-42999 Severidade em análise Ransomware no catálogo em 15/05/2025

SAP NetWeaver Deserialization Vulnerability

SAP · NetWeaver · CWE-502

SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content. EN

CVE-2025-31324 Severidade em análise Ransomware no catálogo em 29/04/2025

SAP NetWeaver Unrestricted File Upload Vulnerability

SAP · NetWeaver · CWE-434

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries. EN

CVE-2025-29824 Severidade em análise Ransomware no catálogo em 08/04/2025

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft · Windows · CWE-416

Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. EN

CVE-2025-22457 Severidade em análise Ransomware no catálogo em 04/04/2025

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti · Connect Secure, Policy Secure, and ZTA Gateways · CWE-121

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution. EN

CVE-2025-24472 Severidade em análise Ransomware no catálogo em 18/03/2025

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet · FortiOS and FortiProxy · CWE-288

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests. EN

CVE-2025-26633 Severidade em análise Ransomware no catálogo em 11/03/2025

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Microsoft · Windows · CWE-707

Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally. EN