Skip to content
Português
Schematic map of the digital-security institutional landscapeSimplified illustration of the continents, marking with a dot the approximate location of fourteen digital-security bodies across six continents. The same elements, with the same function, are available in the list beside it.

Actively exploited vulnerabilities

CISA KEV and EUVD/ENISA catalogs — the ten most recent; those matching a watched vendor are marked in red.

Last collected: 8/14/26, 12:02 AM

Showing only alerts from EUVD / ENISA. Click again to see both sources. See both sources

  • CVE: CVE-2026-20349[watched vendor]EUVD / ENISA

    Vendor / product: Cisco

    A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.  This vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

    View source ↗

    Severity: [High · CVSS 8.6]

    Due: no due date

  • CVE: CVE-2026-68820[watched vendor]EUVD / ENISA

    Vendor / product: Microsoft

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

    View source ↗

    Severity: [High · CVSS 7.0]

    Due: no due date

  • CVE: CVE-2026-59310[watched vendor]EUVD / ENISA

    Vendor / product: VMware

    VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

    View source ↗

    Severity: [Critical · CVSS 9.8]

    Due: no due date

  • CVE: CVE-2026-72898EUVD / ENISA

    Vendor / product: metabase

    Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

    View source ↗

    Severity: [Critical · CVSS 10.0]

    Due: no due date

  • CVE: CVE-2017-10271EUVD / ENISA

    Vendor / product: Oracle Corporation

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

    View source ↗

    Severity: [High · CVSS 7.5]

    Due: no due date

View the full archive (1670 vulnerabilities) →

Radar

What's happening in tech — Angola, Portugal, Africa and the world, with a focus on cybersecurity. Curated by us, written by whoever bylines each article.

Filter news by category ↓

Sources monitored
22
Vulnerabilities tracked
1,670
Items collected
0

Institutional landscape

Fourteen bodies, six continents. Not all of them have a queryable catalogue or feed — in Africa, we did not find one: not at the regional coordination body (AfricaCERT), not in the continental framework (Malabo Convention), not at Angola's own institutions (APD, INACOM). That is the gap TAC helps close in the Angolan market.

Has a data source — click to filter the list

No data source identified — informational

Curated news

No items in this category right now.