CISA · page 4

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical remote code execution vulnerability affecting PTC Windchill PDMlink and PTC FlexPLM software to its Known Exploited Vulnerabilities (KEV) catalog on Thursday, March 21, 2024.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Tuesday regarding the active exploitation of a critical security vulnerability, CVE-2025-67038, affecting Lantronix EDS5000 Series devices. This code injection flaw carries a CVSS score of 9.8, indicating…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Thursday to Fortinet customers using FortiGate appliances, advising them to implement security measures against active exploitation targeting numerous devices.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical security flaw in Widget Factory's Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog on Tuesday, citing active exploitation.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical vulnerability affecting the LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog on June 4, 2026. This vulnerability, identified as CVE-2026-54420 with a CVSS score of 8.5, allows…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Tuesday, citing active exploitation. The vulnerabilities include CVE-2026-20245, a critical flaw in Cisco Catalyst SD-WAN Manager with a CVSS score…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical flaw affecting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog on Monday, citing evidence of active exploitation. The vulnerability, identified as CVE-2026-42271 and assigned a CVSS score…