HighVulnerabilityMonitoringBackfillExploitedKEVEPSS 87%CVE-2026-24858· updated Nov 8
On 2026-01-27, CISA added CVE-2026-24858 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
730 results
On 2026-01-27, CISA added CVE-2026-24858 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-26, CISA added CVE-2026-23760 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-26, CISA added CVE-2025-52691 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-23, CISA added CVE-2024-37079 (Broadcom VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
According to CyberInsider and The Register, Have I Been Pwned added data allegedly from Under Armour affecting about 72 million email addresses and personal details, after the Everest ransomware group claimed the company in late 2025 .
On 2026-01-21, CISA added CVE-2026-20045 (Cisco Unified Communications Manager) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to BleepingComputer, Endesa and its Energía XXI operator notified customers that hackers accessed the company's systems and obtained contract-related personal data .
According to BleepingComputer, South Korean education group Kyowon confirmed a ransomware attack in which data was exfiltrated and is investigating with authorities whether customer information was included .
According to Security NEXT, MongoDB's zlib implementation contains vulnerability CVE-2025-14847, which may allow external actors to read uninitialized server heap memory .
According to Security NEXT, Nagoya City received a report from a community welfare commissioner on December 3, 2025, that a senior citizen survey roster and questionnaires kept at the commissioner's home had been lost .
According to Security NEXT, on December 10, 2025, the Nara Prefectural Welfare Center for the Visually Impaired misdirected an email when contacting volunteer group members .
According to Security NEXT, Nippon Travel Agency and JR West discovered on November 28, 2025, that passenger records for certain TWILIGHT EXPRESS Mizukaze departures were missing from a data server .
According to Security NEXT, Keio University detected anomalous communications originating from a spam quarantine server at its Shonan Fujisawa Campus in late November 2025 .
According to Security NEXT, the Japan Consumer Credit Association surveyed 40 member companies and reported credit card fraud losses of approximately 10.
According to Security NEXT, Kanagawa Prefecture announced that Kizuki, a contractor for its support program for freelance workers with disabilities, sent a misaddressed email on December 3, 2025 .
According to Security NEXT, Ryokkyukai, the alumni association of Otaru University of Commerce, announced that one of its computers suffered an external intrusion, potentially exposing member personal data .
According to Security NEXT, LASSIC, operator of the remote talent service Remogu, detected an attack on November 11, 2025, finding traces of unauthorized operations on its server .
According to Security NEXT, Kawamoto Pump Mfg.
According to Security NEXT, on December 12, 2025, the Tokyo Metropolitan Government sent a webinar notification via its staff recruitment examinee portal to 9,086 applicants .
On 2025-12-23, Kuaishou issued a statement reporting that its livestreaming feature was targeted by an illicit cyberattack around 22:00 the previous evening .