CISA added CVE-2015-3306 to its Known Exploited Vulnerabilities list (2026-10-08).
ProFTPD Improper Access Control
EPSS 30 days before listing: 0.968 · today: 0.968
#infosec #KEV

🚨 NEW on CISA KEV — exploited in the wild
ProFTPD ProFTPD: ProFTPD Improper Access Control Vulnerability
CVE-2015-3306 · patch by 2026-10-11
🔗 https://ninjasignal.ninja/intel/cve/CVE-2015-3306
#KEV #cybersecurity #infosec

🚨 NEW on CISA KEV — exploited in the wild
ONLYOFFICE Docs: ONLYOFFICE Docs Server Path Traversal Vulnerability
CVE-2021-3199 · patch by 2026-10-11
🔗 https://ninjasignal.ninja/intel/cve/CVE-2021-3199
#KEV #cybersecurity #infosec

🚨 NEW on CISA KEV — exploited in the wild
Strapi Strapi: Strapi Cleartext Storage of Sensitive Information Vulnerability
CVE-2023-22894 · patch by 2026-10-11
🔗 https://ninjasignal.ninja/intel/cve/CVE-2023-22894
#KEV #cybersecurity #infosec

🚨 NEW on CISA KEV — exploited in the wild
Apache Struts: Apache Struts Command Injection Vulnerability
CVE-2016-3081 · patch by 2026-10-11
🔗 https://ninjasignal.ninja/intel/cve/CVE-2016-3081
#KEV #cybersecurity #infosec

🚨 NEW on CISA KEV — exploited in the wild
ISC BIND: ISC BIND Data Processing Errors Vulnerability
CVE-2015-5477 · patch by 2026-10-11
🔗 https://ninjasignal.ninja/intel/cve/CVE-2015-5477
#KEV #cybersecurity #infosec

CISA added CVE-2021-3199 to its Known Exploited Vulnerabilities list (2026-10-08).
ONLYOFFICE Docs Server Path Traversal
EPSS 30 days before listing: 0.082 · today: 0.082
#infosec #KEV

CISA added CVE-2023-22894 to its Known Exploited Vulnerabilities list (2026-10-08).
Strapi Cleartext Storage of Sensitive Information
EPSS 30 days before listing: 0.017 · today: 0.017
#infosec #KEV

CISA added CVE-2016-3081 to its Known Exploited Vulnerabilities list (2026-10-08).
Apache Struts Command Injection
EPSS 30 days before listing: 0.934 · today: 0.934
#infosec #KEV

CISA added CVE-2015-5477 to its Known Exploited Vulnerabilities list (2026-10-08).
ISC BIND Data Processing Errors
EPSS 30 days before listing: 0.913 · today: 0.913
#infosec #KEV

CVE-2026-104286 is a FortiMail 0-day path traversal already being exploited—patch now. #Cybersecurity #Fortinet #ZeroDay #EmailSecurity #CVE2026 #KEV https://thedailytechfeed.com/critical-fortinet-fortimail-0-day-added-to-kev-after-active-exploitation/

CISA added CVE-2026-88779 to its Known Exploited Vulnerabilities list (2026-10-04).
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer
EPSS today: 0.003 (no score 30 days earlier)
#infosec #KEV

🚨 NEW on CISA KEV — exploited in the wild
Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer V
CVE-2026-88779 · patch by 2026-10-07
🔗 https://ninjasignal.ninja/intel/cve/CVE-2026-88779
#KEV #cybersecurity #infosec

#Caturday #Kev

🚨 NEW on CISA KEV — exploited in the wild
Zammad GmbH Zammad: Zammad GmbH Zammad Session Fixation Vulnerability
CVE-2026-102489 · patch by 2026-10-05
🔗 https://ninjasignal.ninja/intel/cve/CVE-2026-102489
#KEV #cybersecurity #infosec

🚨 NEW on CISA KEV — exploited in the wild
Zammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerability
CVE-2026-102490 · patch by 2026-10-05
🔗 https://ninjasignal.ninja/intel/cve/CVE-2026-102490
#KEV #cybersecurity #infosec

CISA added CVE-2026-102489 to its Known Exploited Vulnerabilities list (2026-10-02).
Zammad GmbH Zammad Session Fixation
EPSS today: 0.006 (no score 30 days earlier)
#infosec #KEV

CISA added CVE-2026-102490 to its Known Exploited Vulnerabilities list (2026-10-02).
Zammad GmbH Zammad Improper Privilege Management
EPSS today: 0.003 (no score 30 days earlier)
#infosec #KEV

🚨 NEW on CISA KEV — exploited in the wild
Fortinet FortiMail: Fortinet FortiMail Path Traversal Vulnerability
CVE-2026-104286 · patch by 2026-10-04
🔗 https://ninjasignal.ninja/intel/cve/CVE-2026-104286
#KEV #cybersecurity #infosec

CISA added CVE-2026-104286 to its Known Exploited Vulnerabilities list (2026-10-01).
Fortinet FortiMail Path Traversal
#infosec #KEV