Atualizado diariamente · fontes oficiais
Vulnerabilidades (CVE) que estão sendo exploradas ativamente, segundo o catálogo KEV da CISA, com severidade CVSS e probabilidade de exploração (EPSS).
CVE-2026-94127
Crítica · CVSS 9.3
no catálogo em 22/09/2026
F5 · BIG-IP APM · CWE-122
F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution. EN
CVE-2025-39682
Crítica · CVSS 9.8
no catálogo em 18/09/2026
Linux · Kernel · CWE-754
Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. EN
CVE-2026-76460
Crítica · CVSS 10.0
no catálogo em 16/09/2026
Cisco · Identity Services Engine · CWE-648
Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. EN
Avaliamos versões, acessos e integrações do seu ERP e priorizamos as correções.
Fontes: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database e FIRST EPSS. Conteúdo informativo; siga sempre o aviso e a correção do fabricante.
This product uses the NVD API but is not endorsed or certified by the NVD.
O Bit é uma IA e pode errar. Não compartilhe senhas ou dados pessoais. As conversas não são armazenadas. Saiba mais