CISA's list that day
17 February 2026
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Windows, Synacor Zimbra Collaboration Suite, TeamT5 ThreatSonar Anti-Ransomware and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2008-0015Video ActiveX Control Remote Code Execution | Microsoft Windows | Patch this weekMetasploit module; EPSS 0.77; verified Exploit-DB entry | 0.77 | ||
| CVE-2020-7796(ZCS) Server-Side Request Forgery | Synacor Zimbra Collaboration Suite | Patch this weekEPSS 0.84 | 0.84 | ||
| CVE-2026-2441CSS Use-After-Free | Google Chromium | Patch this weekEPSS 0.55 | 0.55 | ||
| CVE-2024-7694Unrestricted Upload of File with Dangerous Type | TeamT5 ThreatSonar Anti-Ransomware | Patch soon | 0.02 |