{"total":6,"items":[{"id":134,"title":"CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","original_title":"CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","source_rating":null,"summary":"Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76504","type":"kev","language":"en","published_at":"2026-09-30T00:00:00+00:00","severity":"hoog","priority":55,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76504","cvss":9.8,"epss":null,"epss_percentile":null,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":9.8,"epss_max":null,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":135,"title":"CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability","original_title":"CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability","source_rating":null,"summary":"Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidanc","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86950","type":"kev","language":"en","published_at":"2026-09-29T00:00:00+00:00","severity":"hoog","priority":48,"vendors":["Apple"],"cves":[{"id":"CVE-2026-86950","cvss":8.8,"epss":0.01242,"epss_percentile":0.68097,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":8.8,"epss_max":0.01242,"source_count":1,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":136,"title":"CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","original_title":"CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","source_rating":null,"summary":"Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88772","type":"kev","language":"en","published_at":"2026-09-27T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Citrix"],"cves":[{"id":"CVE-2026-88772","cvss":9.5,"epss":0.01301,"epss_percentile":0.69413,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":9.5,"epss_max":0.01301,"source_count":3,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":137,"title":"CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability","original_title":"CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability","source_rating":null,"summary":"Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Bas","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88771","type":"kev","language":"en","published_at":"2026-09-27T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Citrix"],"cves":[{"id":"CVE-2026-88771","cvss":9.5,"epss":0.01063,"epss_percentile":0.63393,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":9.5,"epss_max":0.01063,"source_count":3,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":140,"title":"CVE-2026-87902: WordPress Core Remote File Inclusion Vulnerability","original_title":"CVE-2026-87902: WordPress Core Remote File Inclusion Vulnerability","source_rating":null,"summary":"WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.\n\nVereiste actie: Apply mitigations in accordance with vendor in","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87902","type":"kev","language":"en","published_at":"2026-09-25T00:00:00+00:00","severity":"hoog","priority":68,"vendors":["PHP","WordPress"],"cves":[{"id":"CVE-2026-87902","cvss":8.1,"epss":0.19756,"epss_percentile":0.97331,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":8.1,"epss_max":0.19756,"source_count":3,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":139,"title":"CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability","original_title":"CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability","source_rating":null,"summary":"Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidan","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65660","type":"kev","language":"en","published_at":"2026-09-25T00:00:00+00:00","severity":"hoog","priority":48,"vendors":["Microsoft"],"cves":[{"id":"CVE-2026-65660","cvss":8.8,"epss":0.02101,"epss_percentile":0.81034,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":8.8,"epss_max":0.02101,"source_count":1,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}