最近のKEV情報

KEVとは

KEV（Known Exploited Vulnerabilities）とは、CISA（Cybersecurity and Infrastructure Security Agency）が公開している、既に悪用が確認されている脆弱性のリストです。組織はこのリストを参考にして、重要なセキュリティ対策を優先的に実施することが推奨されています。

本サイトは最新のKEV情報を提供し、過去のKEVファイルとの比較やCVEの詳細情報も確認できるようにすることを目標に作成しています。

30日以内にKEVに登録されたCVE

• CVE-2026-21589:
  Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
• CVE-2026-105134:
  Ahsay AhsayCBS Command Injection Vulnerability
• CVE-2026-76519:
  Cisco Secure Email Gateway Relative Path Traversal Vulnerability
• CVE-2026-105133:
  Ahsay AhsayCBS Improper Authentication Vulnerability
• CVE-2026-0322:
  Palo Alto Networks PAN-OS Code Injection Vulnerability
• CVE-2026-104935:
  Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
• CVE-2026-96951:
  Microsoft Windows Command Injection Vulnerability
• CVE-2015-5477:
  ISC BIND Data Processing Errors Vulnerability
• CVE-2016-3081:
  Apache Struts Command Injection Vulnerability
• CVE-2023-22894:
  Strapi Cleartext Storage of Sensitive Information Vulnerability
• CVE-2021-3199:
  ONLYOFFICE Docs Server Path Traversal Vulnerability
• CVE-2015-3306:
  ProFTPD Improper Access Control Vulnerability
• CVE-2026-88779:
  Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2026-102490:
  Zammad GmbH Zammad Improper Privilege Management Vulnerability
• CVE-2026-102489:
  Zammad GmbH Zammad Session Fixation Vulnerability
• CVE-2026-104286:
  Fortinet FortiMail Path Traversal Vulnerability
• CVE-2026-76504:
  Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
• CVE-2026-86950:
  Apple Multiple Products Out-of-Bounds Write Vulnerability
• CVE-2026-88772:
  Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2026-88771:
  Citrix NetScaler Improper Input Validation Vulnerability
• CVE-2026-67279:
  Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
• CVE-2026-65660:
  Microsoft SharePoint Code Injection Vulnerability
• CVE-2026-87902:
  WordPress Core Remote File Inclusion Vulnerability
• CVE-2026-5430:
  WSO2 Multiple Products Path Traversal Vulnerability
• CVE-2026-71362:
  Adobe Commerce and Magento Incorrect Authorization Vulnerability
• CVE-2026-93952:
  Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
• CVE-2026-94127:
  F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
• CVE-2026-93616:
  Check Point Multiple Products Path Traversal Vulnerability
• CVE-2026-85102:
  Check Point Multiple Products Improper Certificate Validation Vulnerability
• CVE-2026-7273:
  Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
• CVE-2025-39964:
  Linux Kernel Race Condition Vulnerability
• CVE-2026-53266:
  Linux Kernel Out-of-Bounds Write Vulnerability
• CVE-2025-39682:
  Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
• CVE-2026-58704:
  Google Pixel Improper Authorization Vulnerability
• CVE-2026-76460:
  Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
• CVE-2026-87886:
  Acronis Backup Incorrect Default Permissions Vulnerability

リンク