Kestra product
OSS
No CISA KEV deadline is open. CISA last added an OSS CVE on 2 Sep.
Tracked since 4 Sep · RSS
Exploited, by due date
CSV downloadCVEProductAddedDue · federal deadline
Deadlines passed
Coverage
0 articles · all timeNo articles yetArticles that name OSS will appear here.
All CVEs in coverage
1CVE-2026-49869Kestra OSS OS Command Injection VulnerabilityCVSS10.0CriticalExploited2.1%EPSS0articles
How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.