Edição: 25 de setembro de 2026
Agregado automaticamente, sem curadoria humana, a partir de fontes públicas: CISA KEV, NVD, EQSTLab e VEXDay. Cada alerta leva à sua fonte oficial.
Edição fechada · atualizada em 30/09/2026, 15:11
3 alertas em sob exploração ativa de 202 nesta edição.
Incluídas no catálogo KEV da CISA: há evidência de ataques reais. Priorize a correção.
CVE-2026-67279
MikroTik · RouterOS
Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.
CVE-2026-65660
Microsoft · SharePoint
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.
CVE-2026-87902
WordPress · Core
WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.