Relatório semanal — semana 2026-38

Incluídas na CISA KEV (exploração confirmada)

• CVE-2025-39682Crítica · 9.8KEVLinux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability18/09/2026
• CVE-2026-53266Alta · 8.8KEVLinux Kernel Out-of-Bounds Write Vulnerability18/09/2026
• CVE-2025-39964Média · 5.5KEVLinux Kernel Race Condition Vulnerability18/09/2026
• CVE-2026-76460Crítica · 10.0KEVExploit públicoCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability16/09/2026
• CVE-2026-58704Alta · 8.8KEVGoogle Pixel Improper Authorization Vulnerability16/09/2026
• CVE-2026-87886Alta · 7.8KEVAcronis Backup Incorrect Default Permissions Vulnerability16/09/2026
• CVE-2026-76461Crítica · 9.8KEVExploit públicoCisco Secure Email Gateway SQL Injection Vulnerability14/09/2026

CVEs críticas publicadas (KEV e maior EPSS primeiro)

• CVE-2026-76461Crítica · 9.8KEVExploit públicoCisco Secure Email Gateway SQL Injection VulnerabilityEPSS 29.5%
• CVE-2026-76460Crítica · 10.0KEVExploit públicoCisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityEPSS 14%
• CVE-2026-81657Crítica · 9.8IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.8%
• CVE-2026-75885Crítica · 9.3Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpointEPSS 0.8%
• CVE-2025-59953Crítica · 9.8LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeployEPSS 0.8%
• CVE-2026-82967Crítica · 9.8IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.8%
• CVE-2026-82340Crítica · 9.8IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.7%
• CVE-2025-66455Crítica · 9.8LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.pyEPSS 0.7%
• CVE-2026-84082Crítica · 9.8IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.7%
• CVE-2025-53837Crítica · 9.9org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issueEPSS 0.6%
• CVE-2026-84064Crítica · 9.9IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.6%
• CVE-2026-84031Crítica · 9.0IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.6%
• CVE-2026-82832Crítica · 9.6IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.6%
• CVE-2026-84075Crítica · 9.9IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.6%
• CVE-2026-80441Crítica · 9.8IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.6%
• CVE-2026-83452Crítica · 9.8Vulnerability in the Oracle Document Management and Collaboration product of Oracle…EPSS 0.5%
• CVE-2026-83462Crítica · 9.8Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite…EPSS 0.5%
• CVE-2025-43936Crítica · 9.1Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication...EPSS 0.5%
• CVE-2026-84078Crítica · 9.9IBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.5%
• CVE-2026-67100Crítica · 9.8HCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.5%

Maiores altas de EPSS (probabilidade de exploração em 30 dias)

Nada nesta semana.

Novos exploits e templates públicos

Nada nesta semana.