CISA Adds Strapi Sensitive-Data Exposure to KEV
10/08/2026
Strapi issued CISA KEV: CVE-2023-22894 for Strapi. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
CISA Adds ProFTPD Arbitrary File Access to KEV
10/08/2026
ProFTPD issued CISA KEV: CVE-2015-3306 for ProFTPD. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
CISA Adds ONLYOFFICE Docs Path Traversal to KEV
10/08/2026
ONLYOFFICE issued CISA KEV: CVE-2021-3199 for ONLYOFFICE Docs. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
CISA Adds ISC BIND TKEY Denial of Service to KEV
10/08/2026
ISC issued CISA KEV: CVE-2015-5477 for ISC BIND. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
CISA Adds Apache Struts Command Injection to KEV
10/08/2026
Apache issued CISA KEV: CVE-2016-3081 for Apache Struts. Match affected deployments, apply supported fixes, validate operations, and retain evidence.