Vulnerabilidades exploradas (CISA KEV)

CVE-2026-22719 Alta · 8.1 KEV Alta · 56 CWE-77 25/02/2026

Broadcom VMware Aria Operations Command Injection Vulnerability

VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. To remediate CVE-2026-22719, apply the patches listed in the 'Fixed Version' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001 Workarounds for CVE-2026-22719 are documented in the 'Workarounds' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001

CVE-2026-20128 Alta · 7.5 KEV Alta · 55 CWE-257 25/02/2026

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges. Note: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.

CVE-2026-20133 Alta · 7.5 KEV Alta · 56 CWE-200 25/02/2026

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.

CVE-2026-20127 Crítica · 10.0 KEV Urgente · 81 Exploit público CWE-287 25/02/2026

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric. 

CVE-2026-20122 Média · 5.4 KEV Alta · 53 CWE-648 25/02/2026

Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.

CVE-2026-22769 Crítica · 10.0 KEV Alta · 62 CWE-798 17/02/2026

Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.

CVE-2026-2441 Alta · 8.8 KEV Urgente · 70 Exploit público CWE-416 13/02/2026

Google Chromium CSS Use-After-Free Vulnerability

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-25108 Alta · 8.8 KEV Alta · 55 CWE-78 13/02/2026

Soliton Systems K.K FileZen OS Command Injection Vulnerability

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command.

CVE-2026-20700 Alta · 7.8 KEV Alta · 58 Exploit público CWE-119 11/02/2026

Apple Multiple Buffer Overflow Vulnerability

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.

CVE-2026-21533 Alta · 7.8 KEV Alta · 61 Exploit público CWE-269 10/02/2026

Microsoft Windows Improper Privilege Management Vulnerability

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

CVE-2026-21519 Alta · 7.8 KEV Alta · 54 CWE-843 10/02/2026

Microsoft Windows Type Confusion Vulnerability

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-21525 Média · 6.2 KEV Alta · 52 CWE-476 10/02/2026

Microsoft Windows NULL Pointer Dereference Vulnerability

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

CVE-2026-21514 Alta · 7.8 KEV Alta · 58 Exploit público CWE-807 10/02/2026

Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-21510 Alta · 8.8 KEV Alta · 62 Exploit público CWE-693 10/02/2026

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-21513 Alta · 8.8 KEV Alta · 56 CWE-693 10/02/2026

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-1603 Alta · 7.5 KEV Alta · 63 Exploit público CWE-306 10/02/2026

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

CVE-2025-68686 Média · 5.9 KEV Alta · 53 CWE-200 10/02/2026

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.

CVE-2026-1731 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-78 06/02/2026

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.

CVE-2026-21643 Crítica · 9.8 KEV Urgente · 73 Exploit público CWE-89 06/02/2026

Fortinet FortiClient EMS SQL Injection Vulnerability

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

CVE-2025-15556 Alta · 7.5 KEV Alta · 59 Exploit público CWE-494 02/02/2026

Notepad++ Download of Code Without Integrity Check Vulnerability

Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download and execute an attacker-controlled installer, resulting in arbitrary code execution with the privileges of the user.