{"total":21,"items":[{"id":581,"title":"Kwetsbaarheid verholpen in Fortinet FortiMail","original_title":"Kwetsbaarheid verholpen in Fortinet FortiMail","source_rating":null,"summary":"Fortinet heeft een kwetsbaarheid verholpen in FortiMail. FortiMail bevat een kritieke kwetsbaarheid (CVE-2026-104286) in de verwerking van bestandspaden, veroorzaakt door een combinatie van Path Traversal (CWE-22) en onvoldoende neutralisatie van NULL-bytes (CWE-158). Een niet-geauthenticeerde aanvaller kan via speciaa","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0398","type":"advisory","language":"nl","published_at":"2026-10-02T07:21:47+00:00","severity":"kritiek","priority":70,"vendors":["Fortinet"],"cves":[{"id":"CVE-2026-104286","cvss":9.8,"epss":null,"epss_percentile":null,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":null,"source_count":2,"ncsc":{"kans":"M","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":27,"title":"Actief misbruik van zeroday-kwetsbaarheden in Zammad: update nu","original_title":"Actief misbruik van zeroday-kwetsbaarheden in Zammad: update nu","source_rating":null,"summary":"Er zijn twee zeroday-kwetsbaarheden ontdekt in Zammad, een softwareproduct voor klantenservice. De kwetsbaarheden hebben de kenmerken CVE-2026-102489 en CVE-2026-102490. Beide kwetsbaarheden worden actief misbruikt en de kans op misbruik en de mogelijke schade zijn hoog.","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu","type":"news","language":"nl","published_at":"2026-09-30T18:44:28+00:00","severity":"kritiek","priority":70,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.00582,"epss_percentile":0.45835,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00262,"epss_percentile":0.16336,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00582,"source_count":4,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":414,"title":"Kwetsbaarheden aangetroffen in Zammad","original_title":"Kwetsbaarheden aangetroffen in Zammad","source_rating":null,"summary":"Er zijn twee zeroday-kwetsbaarheden aangetroffen in Zammad. De eerste kwetsbaarheid heeft het kenmerk CVE-2026-102489 toegekend gekregen. De kwetsbaarheid stelt een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren. De kwetsbaarheid is aanwezig in Zammad versies 6.3.0 tot en met 6.","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0396","type":"advisory","language":"nl","published_at":"2026-09-30T17:31:14+00:00","severity":"kritiek","priority":95,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.00582,"epss_percentile":0.45835,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00262,"epss_percentile":0.16336,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00582,"source_count":4,"ncsc":{"kans":"H","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":416,"title":"Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway","original_title":"Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway","source_rating":null,"summary":"Citrix heeft 8 kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De volgende ondersteunde versies van Citrix NetScaler ADC en Citrix NetScaler Gateway zijn kwetsbaar:\n\n- Citrix NetScaler ADC en Citrix NetScaler Gateway 14.1 vóór versie 14.1-73.37\n- Citrix NetScaler ADC en Citrix NetScaler Gateway 13.1 vóó","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0394","type":"advisory","language":"nl","published_at":"2026-09-30T08:38:43+00:00","severity":"kritiek","priority":95,"vendors":["Citrix"],"cves":[{"id":"CVE-2026-88772","cvss":9.5,"epss":0.01301,"epss_percentile":0.69447,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-88771","cvss":9.5,"epss":0.01063,"epss_percentile":0.63433,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-88777","cvss":8.8,"epss":0.00384,"epss_percentile":0.30079,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-88775","cvss":8.8,"epss":0.00384,"epss_percentile":0.3008,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-88776","cvss":8.8,"epss":0.00384,"epss_percentile":0.3008,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-88778","cvss":8.8,"epss":0.00379,"epss_percentile":0.29505,"in_kev":false,"kev_ransomware":false}],"cve_count":8,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.5,"epss_max":0.01301,"source_count":3,"ncsc":{"kans":"H","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":29,"title":"Kwetsbaarheid in WordPress wordt actief misbruikt: update nu","original_title":"Kwetsbaarheid in WordPress wordt actief misbruikt: update nu","source_rating":null,"summary":"Er is een kwetsbaarheid gevonden in WordPress met het kenmerk CVE-2026-87902. Deze kwetsbaarheid kan een hoog risico vormen omdat een aanvaller zonder inloggegevens mogelijk schadelijke acties kan uitvoeren op de server waar de WordPress website op draait. De kans op misbruik wordt als ‘normaal’ beoordeeld met de mogel","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/kwetsbaarheid-in-wordpress-wordt-actief-misbruikt-update-nu","type":"news","language":"nl","published_at":"2026-09-24T10:30:00+00:00","severity":"kritiek","priority":88,"vendors":["WordPress"],"cves":[{"id":"CVE-2026-87902","cvss":8.1,"epss":0.45501,"epss_percentile":0.98756,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":8.1,"epss_max":0.45501,"source_count":3,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":417,"title":"Kwetsbaarheid verholpen in WordPress","original_title":"Kwetsbaarheid verholpen in WordPress","source_rating":null,"summary":"De ontwikkelaars van WordPress hebben een kwetsbaarheid verholpen in WordPress.\n\nEen kwaadwillende kan de kwetsbaarheid met kenmerk CVE-2026-87902 misbruiken, om zonder authenticatie een lokaal PHP-bestand buiten de actieve themamappen door WordPress te laten inladen. Onder bepaalde voorwaarden met betrekking tot het a","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0389","type":"advisory","language":"nl","published_at":"2026-09-24T09:14:33+00:00","severity":"kritiek","priority":83,"vendors":["WordPress"],"cves":[{"id":"CVE-2026-87902","cvss":8.1,"epss":0.45501,"epss_percentile":0.98756,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":8.1,"epss_max":0.45501,"source_count":3,"ncsc":{"kans":"M","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":142,"title":"CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability ","original_title":"CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability ","source_rating":null,"summary":"Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. \n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71362","type":"kev","language":"en","published_at":"2026-09-24T00:00:00+00:00","severity":"kritiek","priority":75,"vendors":["Adobe","Magento"],"cves":[{"id":"CVE-2026-71362","cvss":9.1,"epss":0.87507,"epss_percentile":0.99755,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.1,"epss_max":0.87507,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":85,"title":"Warning: Actively exploited, critical CVE-2026-93616 enables unauthenticated arbitrary script execution on Check Point Management Servers, Patch Immediately!","original_title":"Warning: Actively exploited, critical CVE-2026-93616 enables unauthenticated arbitrary script execution on Check Point Management Servers, Patch Immediately!","source_rating":null,"summary":"","ai":false,"actions":[],"url":"https://ccb.belgium.be/advisories/warning-actively-exploited-critical-cve-2026-93616-enables-unauthenticated-arbitrary","type":"advisory","language":"en","published_at":"2026-09-23T15:12:48+00:00","severity":"kritiek","priority":70,"vendors":["Check Point"],"cves":[{"id":"CVE-2026-93616","cvss":9.8,"epss":0.19654,"epss_percentile":0.9732,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":0.19654,"source_count":2,"ncsc":null,"source":{"slug":"ccb-be","name":"CCB / Safeonweb@work (België)","category":"overheid","country":"BE","license":"© CCB, hergebruik voorbehouden","reuse":"link"},"bundle":null},{"id":424,"title":"Kwetsbaarheden verholpen in Check Point VPN-producten","original_title":"Kwetsbaarheden verholpen in Check Point VPN-producten","source_rating":null,"summary":"Check Point heeft twee kritieke kwetsbaarheden verholpen in Quantum Security Gateway en Security Management. De kwetsbaarheid met kenmerk CVE-2026-85102 heeft een CVSS-score van 9,8. De kwetsbaarheid bevindt zich in het VPN-onderhandelingsproces van de Quantum Security Gateway en wordt veroorzaakt door onjuiste validat","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0365","type":"advisory","language":"nl","published_at":"2026-09-23T08:28:31+00:00","severity":"kritiek","priority":95,"vendors":["Check Point"],"cves":[{"id":"CVE-2026-85102","cvss":9.8,"epss":0.07546,"epss_percentile":0.94334,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-85103","cvss":9.8,"epss":0.03652,"epss_percentile":0.89251,"in_kev":false,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":0.07546,"source_count":3,"ncsc":{"kans":"H","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":429,"title":"Kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE)","original_title":"Kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE)","source_rating":null,"summary":"Cisco heeft 21 kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE) en Cisco ISE Passive Identity Connector (ISE-PIC). De kwetsbaarheden betreffen verschillende beveiligingsproblemen in Cisco ISE en ISE-PIC, waaronder mogelijkheden voor niet-geauthenticeerde en laaggeprivilegieerde kwaadwillenden om via net","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0382","type":"advisory","language":"nl","published_at":"2026-09-17T09:24:38+00:00","severity":"kritiek","priority":100,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76460","cvss":10.0,"epss":0.14026,"epss_percentile":0.96453,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-76423","cvss":10.0,"epss":0.00583,"epss_percentile":0.45945,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-20192","cvss":10.0,"epss":0.00458,"epss_percentile":0.37456,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-20130","cvss":10.0,"epss":0.00395,"epss_percentile":0.31376,"in_kev":false,"kev_ransomware":false}],"cve_count":4,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.14026,"source_count":3,"ncsc":{"kans":"H","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":249,"title":"Cisco Advance Notification for Publication of September 16, 2026, Security Advisories","original_title":"Cisco Advance Notification for Publication of September 16, 2026, Security Advisories","source_rating":null,"summary":"On September 16, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the advisories that are listed in the following tables. To remediate these vulnerabilities, Cisco strongly…","ai":false,"actions":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-jfxK98ZP?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20September%2016,%202026,%20Security%20Advisories%26vs_k=1","type":"advisory","language":"en","published_at":"2026-09-16T16:07:26+00:00","severity":"kritiek","priority":75,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76460","cvss":10.0,"epss":0.14026,"epss_percentile":0.96453,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-20305","cvss":9.1,"epss":0.01406,"epss_percentile":0.71636,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-20306","cvss":9.1,"epss":0.01367,"epss_percentile":0.70881,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-20307","cvss":9.9,"epss":0.00955,"epss_percentile":0.60018,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-76424","cvss":7.2,"epss":0.00917,"epss_percentile":0.58821,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-20176","cvss":9.1,"epss":0.00781,"epss_percentile":0.54362,"in_kev":false,"kev_ransomware":false}],"cve_count":24,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.14026,"source_count":3,"ncsc":null,"source":{"slug":"cisco-psirt","name":"Cisco PSIRT","category":"vendor","country":null,"license":"© Cisco","reuse":"excerpt"},"bundle":null},{"id":252,"title":"Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability","original_title":"Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability","source_rating":null,"summary":"A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an…","ai":false,"actions":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Authentication%20Bypass%20Vulnerability%26vs_k=1","type":"advisory","language":"en","published_at":"2026-09-16T16:03:19+00:00","severity":"kritiek","priority":85,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-20079","cvss":10.0,"epss":0.8818,"epss_percentile":0.99765,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.8818,"source_count":3,"ncsc":null,"source":{"slug":"cisco-psirt","name":"Cisco PSIRT","category":"vendor","country":null,"license":"© Cisco","reuse":"excerpt"},"bundle":null},{"id":269,"title":"Cisco Identity Services Engine Authentication Bypass Vulnerability","original_title":"Cisco Identity Services Engine Authentication Bypass Vulnerability","source_rating":null,"summary":"A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication…","ai":false,"actions":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Authentication%20Bypass%20Vulnerability%26vs_k=1","type":"advisory","language":"en","published_at":"2026-09-16T16:00:00+00:00","severity":"kritiek","priority":75,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76460","cvss":10.0,"epss":0.14026,"epss_percentile":0.96453,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.14026,"source_count":3,"ncsc":null,"source":{"slug":"cisco-psirt","name":"Cisco PSIRT","category":"vendor","country":null,"license":"© Cisco","reuse":"excerpt"},"bundle":null},{"id":152,"title":"CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","original_title":"CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","source_rating":null,"summary":"Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.\n\nVereiste actie: Appl","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76460","type":"kev","language":"en","published_at":"2026-09-16T00:00:00+00:00","severity":"kritiek","priority":75,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76460","cvss":10.0,"epss":0.14026,"epss_percentile":0.96453,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.14026,"source_count":3,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":35,"title":"Kritieke kwetsbaarheid in GitLab wordt actief misbruikt: update nu","original_title":"Kritieke kwetsbaarheid in GitLab wordt actief misbruikt: update nu","source_rating":null,"summary":"Er is een kritieke kwetsbaarheid in GitLab Community Edition en Enterprise Edition gevonden met het kenmerk CVE-2026-85706. De kwetsbaarheid heeft een CVSS-score van 10.0 en wordt actief misbruikt. Het NCSC beoordeelt de kans op misbruik en de mogelijke schade als hoog en adviseert om zo snel mogelijk beveiligingsupdat","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/kritieke-kwetsbaarheid-in-gitlab-wordt-actief-misbruikt-update-nu","type":"news","language":"nl","published_at":"2026-09-12T09:15:28+00:00","severity":"kritiek","priority":80,"vendors":["GitLab"],"cves":[{"id":"CVE-2026-85706","cvss":10.0,"epss":0.92956,"epss_percentile":0.9983,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.92956,"source_count":2,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":158,"title":"CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","original_title":"CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","source_rating":null,"summary":"GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.\n\nVereiste actie: Apply mitigations in accordance with vendor instr","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85706","type":"kev","language":"en","published_at":"2026-09-11T00:00:00+00:00","severity":"kritiek","priority":75,"vendors":["GitLab"],"cves":[{"id":"CVE-2026-85706","cvss":10.0,"epss":0.92956,"epss_percentile":0.9983,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.92956,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":37,"title":"Kritieke kwetsbaarheden in Check Point VPN-producten actief misbruikt: update nu","original_title":"Kritieke kwetsbaarheden in Check Point VPN-producten actief misbruikt: update nu","source_rating":null,"summary":"Er zijn 2 kritieke kwetsbaarheden in Check Point VPN-producten, met de kenmerken CVE-2026-85102 en CVE-2026-85103. Het gaat om 2 ernstige kwetsbaarheden met een CVSS-score van 9,8. Het NCSC beoordeelt de kans op misbruik en de mogelijke schade als hoog. Er is actief misbruik waargenomen van CVE-2026-85102, het advies i","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-check-point-vpn-producten-actief-misbruikt-update-nu","type":"news","language":"nl","published_at":"2026-09-10T09:37:15+00:00","severity":"kritiek","priority":70,"vendors":["Check Point"],"cves":[{"id":"CVE-2026-85102","cvss":9.8,"epss":0.07546,"epss_percentile":0.94334,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-85103","cvss":9.8,"epss":0.03652,"epss_percentile":0.89251,"in_kev":false,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":0.07546,"source_count":3,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":164,"title":"CVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","original_title":"CVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","source_rating":null,"summary":"Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20079","type":"kev","language":"en","published_at":"2026-09-09T00:00:00+00:00","severity":"kritiek","priority":85,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-20079","cvss":10.0,"epss":0.8818,"epss_percentile":0.99765,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.8818,"source_count":3,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":45,"title":"Kwetsbaarheid in N-central van N-able: update nu","original_title":"Kwetsbaarheid in N-central van N-able: update nu","source_rating":null,"summary":"Er is een ernstige kwetsbaarheid, CVE-2026-86218, gevonden in N-central van N-able met een CVSS-score van 10. Deze kwetsbaarheid maakt het voor onbevoegden mogelijk om op afstand, zonder inloggegevens, schadelijke code uit te voeren. Het is belangrijk om de door N-able uitgebrachte updates zo snel mogelijk te installer","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/kwetsbaarheid-in-n-central-van-n-able-update-nu","type":"news","language":"nl","published_at":"2026-09-07T12:18:51+00:00","severity":"kritiek","priority":70,"vendors":[],"cves":[{"id":"CVE-2026-86218","cvss":10.0,"epss":0.12928,"epss_percentile":0.96202,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.12928,"source_count":2,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":53,"title":"Kwetsbaarheden in PaperCut MF en NG met actief misbruik: update onmiddellijk","original_title":"Kwetsbaarheden in PaperCut MF en NG met actief misbruik: update onmiddellijk","source_rating":null,"summary":"Er zijn twee actief misbruikte kwetsbaarheden aangetroffen in PaperCut MF en PaperCut NG, bekend als CVE-2026-82078 en CVE-2026-81578. Deze kwetsbaarheden worden beoordeeld met een kans op misbruik van medium en een hoge kans op schade. Omdat er al actief misbruik is van deze kwetsbaarheden, is het belangrijk om snel a","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/kwetsbaarheden-in-papercut-mf-en-ng-met-actief-misbruik-update-onmiddellijk","type":"news","language":"nl","published_at":"2026-08-28T14:00:53+00:00","severity":"kritiek","priority":80,"vendors":[],"cves":[{"id":"CVE-2026-81578","cvss":8.8,"epss":0.85169,"epss_percentile":0.9971,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-82078","cvss":9.4,"epss":0.61394,"epss_percentile":0.99142,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.85169,"source_count":1,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":64,"title":"Meerdere kwetsbaarheden in Adobe Commerce: update onmiddellijk","original_title":"Meerdere kwetsbaarheden in Adobe Commerce: update onmiddellijk","source_rating":null,"summary":"Er zijn meerdere kwetsbaarheden gevonden in Adobe Commerce. Onder de kwetsbaarheden is er één met een CVSS-score van 9.1. Deze heeft het kenmerk CVE-2026-71362. Er is momenteel geen melding van actief misbruik, maar misbruik zou onder andere kunnen leiden tot: het lekken van klant- en bedrijfsgegevens en verstoring van","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/meerdere-kwetsbaarheden-in-adobe-commerce-update-onmiddellijk","type":"news","language":"nl","published_at":"2026-08-18T13:10:05+00:00","severity":"kritiek","priority":80,"vendors":["Adobe"],"cves":[{"id":"CVE-2026-71362","cvss":9.1,"epss":0.87507,"epss_percentile":0.99755,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.1,"epss_max":0.87507,"source_count":2,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null}]}