CISA's list that day
18 September 2023
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Realtek SDK, Zyxel EMG2926 Routers, Laravel Ignition and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2014-8361Improper Input Validation | Realtek SDK | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| CVE-2021-3129File Upload | Laravel Ignition | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2017-6884Command Injection | Zyxel EMG2926 Routers | Patch this weekRansomware use | 0.35 | ||
| CVE-2022-22265Use-After-Free | Samsung Mobile Devices | Patch soon | 0.00 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.