CISAKEV – TheCyberThrone

Four More Vulnerabilities Enter CISA KEV

CISA has added four vulnerabilities affecting WSO2, Adobe Commerce, Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) Catalog. The common factor is simple: these vulnerabilities are associated…

PravinKarthik September 28, 2026

MongoBleed Now in CISA KEV After Global Exploitation Wave

MongoBleed, tracked as CVE-2025-14847, represents a critical unauthenticated memory-leak vulnerability in MongoDB's zlib-based network compression, allowing remote attackers to extract sensitive uninitialized heap memory from exposed servers. CISA added it…

PravinKarthik December 30, 2025

CISA adds Zimbra and Microsoft vulnerabilities to its KEV Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has recently added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. These vulnerabilities, affecting Microsoft Partner Center and Synacor Zimbra Collaboration…

PravinKarthik February 26, 2025