Several products
No CISA KEV deadline is open. CISA last added a Several products CVE on 2 Oct.
Tracked since 1 Oct · latest article Mon 12 Oct · RSS
Exploited, by due date
CSV downloadDeadlines passed
10 articles from 6 outlets since 1 Oct; the latest 14 days ago.
- Article
- First report
- Official notice
Show as table
Who reported 6 outlets, last 12 months
- Security Affairs2
- The Hacker News2
- SecurityOnline2
- CISA2
- SecurityWeek1
- Infosecurity1
- Attackers Exploit Atlassian Flaw Just Two Hours After Details EmergeThe Hacker News
- Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at RiskSecurityOnline
- Zammad Flaws Let Attackers Reach Root in Seconds, CISA WarnsSecurity Affairs
- CISA Flags Actively Exploited Zammad Flaw Enabling Remote Code ExecutionCISA · official notice
- CISA Warns of Actively Exploited Zammad Flaw Enabling Root AccessCISA · official notice
- Zammad Zero Days Let Attackers Hijack Dutch Cybersecurity Non-ProfitInfosecurity
- Zammad Zero Days Let Attackers Hijack Sessions and Gain Root AccessSecurityOnline
- AI Fuels Exploitation as Model Flaw Enables Remote Code ExecutionThe Hacker News
- AI Attackers Breached Dutch Security Institute Through Zammad Zero-DaysSecurityWeek
- AI Agent Chained Zammad Zero Days to Gain Root Access in SecondsSecurity Affairs
All CVEs in coverage
2How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.