#cisa-kev

3 analyses tagged cisa-kev, sorted newest first.

critical 4 sources
Ghost CMS CVE-2026-26980: Critical SQL Injection Leads to Admin Takeover and ClickFix Campaigns
Attackers are actively exploiting CVE-2026-26980, a critical SQL injection in the Ghost CMS Content API, to extract Admin API Keys. Stolen keys are used to inject malicious JavaScript into published articles, serving ClickFix social engineering payloads to website visitors.

#ghost-cms #cisa-kev #sql-injection #clickfix #credential-theft #content-supply-chain

2026-06-11
high 5 sources
Linux Copy Fail CVE-2026-31431: KEV Privilege Escalation on Shared Build Hosts
CISA added Linux kernel CVE-2026-31431 to KEV on 2026-05-01. Theori's Copy Fail research ties the bug to AF_ALG AEAD in-place operation and shows why shared CI runners, Kubernetes nodes, and multi-tenant Linux hosts need kernel patch proof or AF_ALG mitigation.

#linux #kernel #cisa-kev #zero-day #ci-cd

2026-06-01
critical 5 sources
DAEMON Tools Lite CVE-2026-8398: Signed Installer Supply-Chain Compromise
CISA added DAEMON Tools Lite CVE-2026-8398 to KEV after the vendor confirmed unauthorized interference in its infrastructure and compromised DAEMON Tools Lite installation packages.

#daemon-tools #supply-chain #signed-malware #cisa-kev #windows

2026-05-31