One page per week, never rewritten. Newest first.
Exploited flaw lets unauthenticated attackers run code on self-managed GitLab servers
These three weeks brought 45 items from 9 publishers, and 21 of them carry published exploitation, all listed in CISA KEV. None of the exploited items touch Microsoft 365, while 10 others do, with no exploitation published. One publisher, cisa.gov, supplied 21 of the 45, which says more about the source mix than about the threat landscape.
All eight exploited items these two weeks are in CISA KEV
Forty-five items came through over these two weeks, from twelve publishers. Eight carried published exploitation, and every one of those eight is listed in CISA KEV. Five further items touch Microsoft 365, with no exploitation published for any of them.
All seven exploited items this week are already in CISA KEV
Forty-five items were reviewed this week, seven of them with published exploitation, and all seven are listed in CISA KEV. None of the exploited items touch Microsoft 365; seven other items do, with no exploitation published for them. Five of the exploited items lead the page: ProFTPD, Zammad, ONLYOFFICE Docs, Apache Struts and Citrix NetScaler.
Eight exploited flaws this week, including SharePoint code injection in KEV
Forty-five items were reviewed this week, and eight of them carry published exploitation. The five at the top of the page are all in CISA KEV: Microsoft SharePoint, WSO2, Cisco Catalyst SD-WAN Manager, Adobe Commerce and Magento, and Apple. Ten items touch Microsoft 365, and one of those is also being exploited.
Remote code execution dominates; eleven exploited items, none touching Microsoft 365
Forty-five items from eight publishers this week. Eleven had published exploitation, and all of them sat outside Microsoft 365. Thirteen items touched Microsoft 365, none of them with exploitation published.
Access control failures drive six of eleven exploited flaws this week
Forty-five items were reviewed between 9 and 16 September, and eleven of them have published exploitation. Five touch Microsoft 365, and none of those five have published exploitation. One publisher supplied 22 of the 45 items, so treat the shape of the week as partly a property of the source mix.