Relatório semanal — semana 2026-39

Incluídas na CISA KEV (exploração confirmada)

• CVE-2026-88771Crítica · 9.8KEVExploit públicoCitrix NetScaler Improper Input Validation Vulnerability27/09/2026
• CVE-2026-88772Alta · 8.1KEVExploit públicoCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability27/09/2026
• CVE-2026-65660Alta · 8.8KEVExploit públicoMicrosoft SharePoint Code Injection Vulnerability25/09/2026
• CVE-2026-87902Alta · 8.1KEVExploit públicoWordPress Core Remote File Inclusion Vulnerability25/09/2026
• CVE-2026-67279Média · 6.5KEVExploit públicoMikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability25/09/2026
• CVE-2026-5430Crítica · 10.0KEVExploit públicoWSO2 Multiple Products Path Traversal Vulnerability24/09/2026
• CVE-2026-71362Crítica · 9.1KEVExploit públicoAdobe Commerce and Magento Incorrect Authorization Vulnerability24/09/2026
• CVE-2026-85102Crítica · 9.8KEVExploit públicoCheck Point Multiple Products Improper Certificate Validation Vulnerability22/09/2026
• CVE-2026-93952Crítica · 10.0KEVArista VeloCloud Orchestrator Improper Input Validation Vulnerability22/09/2026
• CVE-2026-93616Crítica · 9.8KEVExploit públicoCheck Point Multiple Products Path Traversal Vulnerability22/09/2026
• CVE-2026-94127Crítica · 9.8KEVExploit públicoF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability22/09/2026
• CVE-2026-7273Alta · 8.8KEVZyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability21/09/2026

CVEs críticas publicadas (KEV e maior EPSS primeiro)

• CVE-2026-93616Crítica · 9.8KEVExploit públicoCheck Point Multiple Products Path Traversal VulnerabilityEPSS 19.7%
• CVE-2026-94127Crítica · 9.8KEVExploit públicoF5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityEPSS 2.2%
• CVE-2026-88771Crítica · 9.8KEVExploit públicoCitrix NetScaler Improper Input Validation VulnerabilityEPSS 1.1%
• CVE-2026-93952Crítica · 10.0KEVArista VeloCloud Orchestrator Improper Input Validation VulnerabilityEPSS 1.1%
• CVE-2026-18169Crítica · 9.9IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesEPSS 0.5%
• CVE-2026-18163Crítica · 9.8IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesEPSS 0.5%
• CVE-2025-63564Crítica · 9.8SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to...EPSS 0.5%
• CVE-2026-18162Crítica · 9.8IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesEPSS 0.5%
• CVE-2026-16346Crítica · 9.9DataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 0.5%
• CVE-2026-86246Crítica · 9.1Apache Tomcat Native: Insecure OpenSSL options enabledEPSS 0.4%
• CVE-2026-17635Crítica · 9.1IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesEPSS 0.3%
• CVE-2025-12999Crítica · 9.1UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset…EPSS 0.3%
• CVE-2026-88416Crítica · 9.8MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form…EPSS 0.3%
• CVE-2026-100833Crítica · 9.6Contrast before 1.23.1 Image Substitution via Policy GenerationEPSS 0.2%
• CVE-2026-18872Crítica · 9.3IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesEPSS 0.2%

Maiores altas de EPSS (probabilidade de exploração em 30 dias)

Nada nesta semana.

Novos exploits e templates públicos

Nada nesta semana.