BLACKOUT MAP

Libreria delle vulnerabilità sfruttate

Ogni falla software che gli aggressori hanno notoriamente usato, dal catalogo che l'agenzia statunitense per la sicurezza informatica e delle infrastrutture (CISA) tiene dal novembre 2021. Aggiornato ogni ora.

1.758 vulnerabilità

AggiuntoVulnerabilitàProdottoGravitàProbabilità di attacco
26 ott 2026Stale Internal Request-StateCVE-2026-109619PHP Group PHPCritica 9,2>99,9%
26 ott 2026Memory CorruptionCVE-2026-109618PHP Group PHPCritica 9,2>99,9%
23 ott 2026SQL InjectionCVE-2026-114625Arista VeloCloud OrchestratorCritica 9,41,0%
23 ott 2026Online – Built-in CODE Server OS Command InjectionCVE-2026-110447Collabora Collabora Online – Built-in CODE ServerCritica 9,212%
20 ott 2026External Control of File Name or PathCVE-2026-96656Plex Media ServerAlta 8,61,8%
20 ott 2026Server-Side Request Forgery (SSRF)CVE-2026-96655Plex Media ServerMedia 5,31,6%
20 ott 2026Improper Neutralization of Encoded URI Schemes in a Web PageCVE-2026-96654Plex Media ServerMedia 6,91,9%
20 ott 2026Server-Side Request Forgery (SSRF)CVE-2026-96652Plex Media ServerMedia 5,31,8%
20 ott 2026Uncontrolled Search Path ElementCVE-2026-110936Siemens Software CenterAlta 8,41,0%
20 ott 2026OS Command InjectionCVE-2026-106931EG Secure Solutions SiteGuard Server EditionAlta 8,52,5%
16 ott 2026Authentication Bypass by SpoofingCVE-2026-102764BeyondTrust Remote SupportCritica 9,320%
16 ott 2026Path TraversalCVE-2025-61624Fortinet Multiple ProductsMedia 5,41,3%
15 ott 2026Files or Directories Accessible to External PartiesCVE-2026-21589Atlassian Multiple ProductsCritica 9,399,5%
14 ott 2026Relative Path TraversalCVE-2026-76519Cisco Secure Email GatewayCritica 9,82,2%
14 ott 2026Command InjectionCVE-2026-105134Ahsay AhsayCBSCritica 10,086%
14 ott 2026Improper AuthenticationCVE-2026-105133Ahsay AhsayCBSMedia 6,979%
14 ott 2026Code InjectionCVE-2026-0322Palo Alto Networks PAN-OSAlta 8,61,7%
13 ott 2026Command InjectionCVE-2026-96951Microsoft WindowsAlta 8,89,8%
13 ott 2026Authentication Bypass by SpoofingCVE-2026-104935Ivanti Connect SecureAlta 8,687%
8 ott 2026Cleartext Storage of Sensitive InformationCVE-2023-22894Strapi StrapiAlta 7,24,1%
8 ott 2026Server Path TraversalCVE-2021-3199ONLYOFFICE DocsCritica 9,830%
8 ott 2026Command InjectionCVE-2016-3081Apache StrutsAlta 8,197%
8 ott 2026 ISC BIND Data Processing ErrorsCVE-2015-5477ISC BINDAlta 7,599,6%
8 ott 2026Improper Access ControlCVE-2015-3306ProFTPD ProFTPDCritica 10,099,5%
4 ott 2026Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2026-88779Citrix NetScalerAlta 8,711%
2 ott 2026Improper Privilege ManagementCVE-2026-102490Zammad GmbH ZammadAlta 8,50,9%
2 ott 2026Session FixationCVE-2026-102489Zammad GmbH ZammadAlta 8,72,0%
1 ott 2026Path TraversalCVE-2026-104286Fortinet FortiMailCritica 9,84,6%
30 set 2026Hex EncodingCVE-2026-76504Cisco Catalyst SD-WAN ManagerCritica 9,839%
29 set 2026Out-of-Bounds WriteCVE-2026-86950Apple Multiple ProductsAlta 8,826%
27 set 2026Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2026-88772Citrix NetScalerCritica 9,578%
27 set 2026Improper Input ValidationCVE-2026-88771Citrix NetScalerCritica 9,582%
25 set 2026Remote File InclusionCVE-2026-87902WordPress CoreAlta 8,196%
25 set 2026Improper Enforcement of Behavioral WorkflowCVE-2026-67279MikroTik RouterOSMedia 6,92,3%
25 set 2026Code InjectionCVE-2026-65660Microsoft SharePointAlta 8,88,2%
24 set 2026Commerce and Magento Incorrect Authorization Vulnerability CVE-2026-71362Adobe Commerce and Magento Critica 9,190%
24 set 2026Path Traversal Vulnerability CVE-2026-5430WSO2 Multiple ProductsCritica 10,022%
22 set 2026Heap-based Buffer OverflowCVE-2026-94127F5 BIG-IP APMCritica 9,325%
22 set 2026Improper Input ValidationCVE-2026-93952Arista VeloCloud OrchestratorCritica 9,51,4%
22 set 2026Path TraversalCVE-2026-93616Check Point Multiple ProductsCritica 9,892%
22 set 2026Improper Certificate ValidationCVE-2026-85102Check Point Multiple ProductsCritica 9,854%
21 set 2026Stack-Based Buffer OverflowCVE-2026-7273Zyxel GS1900 Series SwitchesAlta 8,82,8%
18 set 2026Out-of-Bounds WriteCVE-2026-53266Linux KernelAlta 8,80,9%
18 set 2026Race ConditionCVE-2025-39964Linux KernelAlta 7,81,6%
18 set 2026Improper Check for Unusual or Exceptional ConditionsCVE-2025-39682Linux KernelCritica 9,83,3%
16 set 2026Incorrect Default PermissionsCVE-2026-87886Acronis BackupAlta 7,80,2%
16 set 2026Incorrect Use of Privileged APIsCVE-2026-76460Cisco Identity Services EngineCritica 10,076%
16 set 2026Improper AuthorizationCVE-2026-58704Google PixelAlta 8,80,6%
14 set 2026SQL InjectionCVE-2026-76461Cisco Secure Email GatewayCritica 9,830%
11 set 2026Path TraversalCVE-2026-85706GitLab Community Edition and Enterprise EditionCritica 10,097%

Produttori più presi di mira

Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.