BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Patch Sonar//CISA patch deadlines//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Patch Sonar deadlines: Developer\, data & AI tools
X-WR-CALDESC:Federal fix deadlines for actively exploited vulnerabilities\,
  from CISA's KEV catalog. patchsonar.com
REFRESH-INTERVAL;VALUE=DURATION:PT6H
X-PUBLISHED-TTL:PT6H
BEGIN:VEVENT
UID:CVE-2026-111497@patchsonar.com
DTSTAMP:20261027T000000Z
DTSTART;VALUE=DATE:20261110
DTEND;VALUE=DATE:20261111
SUMMARY:Patch deadline: Google Brotli (CVE-2026-111497)
DESCRIPTION:Google Brotli Unchecked Return Value Vulnerability\n\nGoogle Br
 otli contains an unchecked return value vulnerability that allows a remote
  unauthenticated attacker to corrupt adjacent decoder state memory\, discl
 ose sensitive memory contents\, cause a denial of service\, or potentially
  execute arbitrary code using a crafted Brotli-compressed stream.\n\nCISA'
 s required action: Apply mitigations in accordance with vendor instruction
 s\, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Upda
 tes Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Tr
 iage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guida
 nce for cloud services or discontinue use of the product if mitigations ar
 e unavailable. Stakeholders are responsible for evaluating each asset's in
 ternet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n
 \nListed by CISA on 2026-10-27. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-111497
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-21589@patchsonar.com
DTSTAMP:20261015T000000Z
DTSTART;VALUE=DATE:20261018
DTEND;VALUE=DATE:20261019
SUMMARY:Patch deadline: Atlassian Multiple Products (CVE-2026-21589)
DESCRIPTION:Atlassian Multiple Products Files or Directories Accessible to 
 External Parties Vulnerability\n\nMultiple Atlassian products (Bitbucket D
 ata Center \,Confluence Data Center\, Jira Service Management Data Center\
 , Jira Software Data Center\, Bamboo Data Center\, Crowd Data Center\, Cru
 cible and Fisheye) contain a files or directories accessible to external p
 arties vulnerability which could allow an unauthenticated attacker to acce
 ss specific files within the web application root directory in affected ve
 rsions.\n\nCISA's required action: Apply mitigations in accordance with ve
 ndor instructions\, ensuring compliance with CISA’s BOD 26-04 Prioritizi
 ng Security Updates Based on Risk (see URL in Notes) guidance and CISA’s
  “Forensics Triage Requirements” (see URL in Notes). Follow applicable
  BOD 26-04 guidance for cloud services or discontinue use of the product i
 f mitigations are unavailable. Stakeholders are responsible for evaluating
  each asset's internet exposure and ensuring adherence to BOD 26-04 patchi
 ng guidelines.\n\nListed by CISA on 2026-10-15. More: https://patchsonar.c
 om/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-21589
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2016-3081@patchsonar.com
DTSTAMP:20261008T000000Z
DTSTART;VALUE=DATE:20261011
DTEND;VALUE=DATE:20261012
SUMMARY:Patch deadline: Apache Struts (CVE-2016-3081)
DESCRIPTION:Apache Struts Command Injection Vulnerability\n\nApache Struts 
 contains a command injection vulnerability that could allow remote attacke
 rs to execute arbitrary code via method:prefix when Dynamic Method Invocat
 ion is enabled.\n\nCISA's required action: Apply mitigations in accordance
  with vendor instructions\, ensuring compliance with CISA’s BOD 26-04 Pr
 ioritizing Security Updates Based on Risk (see URL in Notes) guidance and 
 CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow ap
 plicable BOD 26-04 guidance for cloud services or discontinue use of the p
 roduct if mitigations are unavailable. Stakeholders are responsible for ev
 aluating each asset's internet exposure and ensuring adherence to BOD 26-0
 4 patching guidelines.\n\nListed by CISA on 2026-10-08. More: https://patc
 hsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2016-3081
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2023-22894@patchsonar.com
DTSTAMP:20261008T000000Z
DTSTART;VALUE=DATE:20261011
DTEND;VALUE=DATE:20261012
SUMMARY:Patch deadline: Strapi Strapi (CVE-2023-22894)
DESCRIPTION:Strapi Cleartext Storage of Sensitive Information Vulnerability
 \n\nStrapi contains a cleartext storage of sensitive information vulnerabi
 lity that could allow attackers with access to the admin panel to discover
  sensitive user details via the query filter. The impacted product(s) coul
 d be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to d
 iscontinue use and/or transition to a supported version. This vulnerabilit
 y can be chained with CVE-2023-22621 to achieve remote code execution. \n\
 nCISA's required action: Apply mitigations in accordance with vendor instr
 uctions\, ensuring compliance with CISA’s BOD 26-04 Prioritizing Securit
 y Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forens
 ics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04
  guidance for cloud services or discontinue use of the product if mitigati
 ons are unavailable. Stakeholders are responsible for evaluating each asse
 t's internet exposure and ensuring adherence to BOD 26-04 patching guideli
 nes.\n\nListed by CISA on 2026-10-08. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2023-22894
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-5430@patchsonar.com
DTSTAMP:20260924T000000Z
DTSTART;VALUE=DATE:20260927
DTEND;VALUE=DATE:20260928
SUMMARY:Patch deadline: WSO2 Multiple Products (CVE-2026-5430)
DESCRIPTION:WSO2 Multiple Products Path Traversal Vulnerability \n\nWSO2 AP
 I Control Plane\, API Manager\, Traffic Manager & Universal Gateway contai
 n a path traversal vulnerability that could allow for unrestricted file up
 load and lead to remote code execution. \n\nCISA's required action: Apply 
 mitigations in accordance with vendor instructions\, ensuring compliance w
 ith CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see UR
 L in Notes) guidance and CISA’s “Forensics Triage Requirements” (see
  URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or
  discontinue use of the product if mitigations are unavailable. Stakeholde
 rs are responsible for evaluating each asset's internet exposure and ensur
 ing adherence to BOD 26-04 patching guidelines.\n\nListed by CISA on 2026-
 09-24. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-5430
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-42016@patchsonar.com
DTSTAMP:20260911T000000Z
DTSTART;VALUE=DATE:20260925
DTEND;VALUE=DATE:20260926
SUMMARY:Patch deadline: JFrog Artifactory (CVE-2026-42016)
DESCRIPTION:JFrog Artifactory Incorrect Authorization Vulnerability\n\nJFro
 g Artifactory contains an incorrect authorization vulnerability that leads
  to a privilege escalation attack due to a validation check of the token s
 ignature/issuer and not the token’s scope.\n\nCISA's required action: Ap
 ply mitigations in accordance with vendor instructions\, ensuring complian
 ce with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (se
 e URL in Notes) guidance and CISA’s “Forensics Triage Requirements” 
 (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud service
 s or discontinue use of the product if mitigations are unavailable. Stakeh
 olders are responsible for evaluating each asset's internet exposure and e
 nsuring adherence to BOD 26-04 patching guidelines.\n\nListed by CISA on 2
 026-09-11. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-42016
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-42018@patchsonar.com
DTSTAMP:20260911T000000Z
DTSTART;VALUE=DATE:20260925
DTEND;VALUE=DATE:20260926
SUMMARY:Patch deadline: JFrog Artifactory (CVE-2026-42018)
DESCRIPTION:JFrog Artifactory Improper Authentication Vulnerability\n\nJFro
 g Artifactory contains an improper authentication vulnerability that could
  return an internal anonymous-user token to an unauthenticated caller when
  anonymous access is disabled\, potentially exposing sensitive resources.\
 n\nCISA's required action: Apply mitigations in accordance with vendor ins
 tructions\, ensuring compliance with CISA’s BOD 26-04 Prioritizing Secur
 ity Updates Based on Risk (see URL in Notes) guidance and CISA’s “Fore
 nsics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-
 04 guidance for cloud services or discontinue use of the product if mitiga
 tions are unavailable. Stakeholders are responsible for evaluating each as
 set's internet exposure and ensuring adherence to BOD 26-04 patching guide
 lines.\n\nListed by CISA on 2026-09-11. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-42018
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-85706@patchsonar.com
DTSTAMP:20260911T000000Z
DTSTART;VALUE=DATE:20260914
DTEND;VALUE=DATE:20260915
SUMMARY:Patch deadline: GitLab Community Edition and Enterprise Edition (CV
 E-2026-85706)
DESCRIPTION:GitLab Community Edition and Enterprise Edition Path Traversal 
 Vulnerability\n\nGitLab Community Edition and Enterprise Edition contains 
 a path traversal vulnerability that allows an unauthenticated user to read
  arbitrary files due to an improper path confinement and missing authentic
 ation enforcement in the repository commits API.\n\nCISA's required action
 : Apply mitigations in accordance with vendor instructions\, ensuring comp
 liance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk
  (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements
 ” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud ser
 vices or discontinue use of the product if mitigations are unavailable. St
 akeholders are responsible for evaluating each asset's internet exposure a
 nd ensuring adherence to BOD 26-04 patching guidelines.\n\nListed by CISA 
 on 2026-09-11. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-85706
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-48710@patchsonar.com
DTSTAMP:20260902T000000Z
DTSTART;VALUE=DATE:20260916
DTEND;VALUE=DATE:20260917
SUMMARY:Patch deadline: Kludex Starlette (CVE-2026-48710)
DESCRIPTION:Kludex Starlette HTTP Request/Response Smuggling Vulnerability\
 n\nKludex Starlette contains a HTTP request/response smuggling vulnerabili
 ty that could allow attackers to inject paths into the host part\, prepend
 ing the actual path leading to issues such as authentication bypass when t
 he authentication depends on the reconstructed URL’s path. This vulnerab
 ility could be chaned with CVE-2026-42271.\n\nCISA's required action: Appl
 y mitigations in accordance with vendor instructions\, ensuring compliance
  with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see 
 URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (s
 ee URL in Notes). Follow applicable BOD 26-04 guidance for cloud services 
 or discontinue use of the product if mitigations are unavailable. Stakehol
 ders are responsible for evaluating each asset's internet exposure and ens
 uring adherence to BOD 26-04 patching guidelines.\n\nListed by CISA on 202
 6-09-02. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-48710
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-49869@patchsonar.com
DTSTAMP:20260902T000000Z
DTSTART;VALUE=DATE:20260905
DTEND;VALUE=DATE:20260906
SUMMARY:Patch deadline: Kestra Kestra OSS (CVE-2026-49869)
DESCRIPTION:Kestra OSS OS Command Injection Vulnerability\n\nKestra OSS con
 tains an OS command injection vulnerability that could allow an unauthenti
 cated remote attacker to create and execute arbitrary workflows without cr
 edentials.\n\nCISA's required action: Apply mitigations in accordance with
  vendor instructions\, ensuring compliance with CISA’s BOD 26-04 Priorit
 izing Security Updates Based on Risk (see URL in Notes) guidance and CISA
 ’s “Forensics Triage Requirements” (see URL in Notes). Follow applic
 able BOD 26-04 guidance for cloud services or discontinue use of the produ
 ct if mitigations are unavailable. Stakeholders are responsible for evalua
 ting each asset's internet exposure and ensuring adherence to BOD 26-04 pa
 tching guidelines.\n\nListed by CISA on 2026-09-02. More: https://patchson
 ar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-49869
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-59822@patchsonar.com
DTSTAMP:20260902T000000Z
DTSTART;VALUE=DATE:20260916
DTEND;VALUE=DATE:20260917
SUMMARY:Patch deadline: BerriAI LiteLLM (CVE-2026-59822)
DESCRIPTION:BerriAI LiteLLM Improper Authentication Vulnerability\n\nBerriA
 I LiteLLM contains an improper authentication vulnerability in the MCP Str
 eamable HTTP endpoint that could allow an unauthenticated attacker to esta
 blish an authenticated MCP session using an arbitrary Bearer token.\n\nCIS
 A's required action: Apply mitigations in accordance with vendor instructi
 ons\, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Up
 dates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics 
 Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 gui
 dance for cloud services or discontinue use of the product if mitigations 
 are unavailable. Stakeholders are responsible for evaluating each asset's 
 internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
 \n\nListed by CISA on 2026-09-02. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-59822
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-82329@patchsonar.com
DTSTAMP:20260902T000000Z
DTSTART;VALUE=DATE:20260905
DTEND;VALUE=DATE:20260906
SUMMARY:Patch deadline: JFrog Artifactory (CVE-2026-82329)
DESCRIPTION:JFrog Artifactory Improper Authentication Vulnerability\n\nJFro
 g Artifactory contains an improper authentication vulnerability that under
  default configuration can allow an unauthenticated attacker with network 
 access to obtain administrative privileges. \n\nCISA's required action: Ap
 ply mitigations in accordance with vendor instructions\, ensuring complian
 ce with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (se
 e URL in Notes) guidance and CISA’s “Forensics Triage Requirements” 
 (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud service
 s or discontinue use of the product if mitigations are unavailable. Stakeh
 olders are responsible for evaluating each asset's internet exposure and e
 nsuring adherence to BOD 26-04 patching guidelines.\n\nListed by CISA on 2
 026-09-02. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-82329
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-66384@patchsonar.com
DTSTAMP:20260827T000000Z
DTSTART;VALUE=DATE:20260910
DTEND;VALUE=DATE:20260911
SUMMARY:Patch deadline: JFrog Artifactory (CVE-2026-66384)
DESCRIPTION:JFrog Artifactory Improper Limitation of a Pathname to a Restri
 cted Directory Vulnerability\n\nJFrog Artifactory contains an improper lim
 itation of a pathname to a restricted directory vulnerability. This can al
 low an authenticated user to write data outside the intended Docker cache 
 path under specific remote-repository conditions.\n\nCISA's required actio
 n: Apply mitigations in accordance with vendor instructions\, ensuring com
 pliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Ris
 k (see URL in Notes) guidance and CISA’s “Forensics Triage Requirement
 s” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud se
 rvices or discontinue use of the product if mitigations are unavailable. S
 takeholders are responsible for evaluating each asset's internet exposure 
 and ensuring adherence to BOD 26-04 patching guidelines.\n\nListed by CISA
  on 2026-08-27. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-66384
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2021-23758@patchsonar.com
DTSTAMP:20260826T000000Z
DTSTART;VALUE=DATE:20260909
DTEND;VALUE=DATE:20260910
SUMMARY:Patch deadline: Ajax.NET Professional Ajax.NET Professional (CVE-20
 21-23758)
DESCRIPTION:Ajax.NET Professional Deserialization of Untrusted Data Vulnera
 bility\n\nAjax.NET Professional (AjaxPro) contains a deserialization of un
 trusted data vulnerability that could allow for remote code execution via 
 arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL)
  and/or end-of-service (EoS). Users are advised to discontinue use and/or 
 transition to a supported version.\n\nCISA's required action: Apply mitiga
 tions in accordance with vendor instructions\, ensuring compliance with CI
 SA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in N
 otes) guidance and CISA’s “Forensics Triage Requirements” (see URL i
 n Notes). Follow applicable BOD 26-04 guidance for cloud services or disco
 ntinue use of the product if mitigations are unavailable. Stakeholders are
  responsible for evaluating each asset's internet exposure and ensuring ad
 herence to BOD 26-04 patching guidelines.\n\nListed by CISA on 2026-08-26.
  More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2021-23758
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-60004@patchsonar.com
DTSTAMP:20260825T000000Z
DTSTART;VALUE=DATE:20260828
DTEND;VALUE=DATE:20260829
SUMMARY:Patch deadline: Gitea Gitea (CVE-2026-60004)
DESCRIPTION:Gitea Code Injection Vulnerability\n\nGitea contains a code inj
 ection vulnerability that allows an attacker with repository write access 
 to send a malicious patch to the diffpatch API endpoint to plant an execut
 able Git hook and run shell commands as the Gitea service account.\n\nCISA
 's required action: Apply mitigations in accordance with vendor instructio
 ns\, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Upd
 ates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics T
 riage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guid
 ance for cloud services or discontinue use of the product if mitigations a
 re unavailable. Stakeholders are responsible for evaluating each asset's i
 nternet exposure and ensuring adherence to BOD 26-04 patching guidelines.\
 n\nListed by CISA on 2026-08-25. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-60004
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-64849@patchsonar.com
DTSTAMP:20260819T000000Z
DTSTART;VALUE=DATE:20260902
DTEND;VALUE=DATE:20260903
SUMMARY:Patch deadline: MLflow MLflow (CVE-2026-64849)
DESCRIPTION:MLflow Server-Side Request Forgery Vulnerability\n\nMLflow cont
 ains a server-side request forgery vulnerability that can allow attackers 
 to reach internal or cloud metadata services and receive response_status a
 nd response_body.\n\nCISA's required action: Apply mitigations in accordan
 ce with vendor instructions\, ensuring compliance with CISA’s BOD 26-04 
 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance an
 d CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow 
 applicable BOD 26-04 guidance for cloud services or discontinue use of the
  product if mitigations are unavailable. Stakeholders are responsible for 
 evaluating each asset's internet exposure and ensuring adherence to BOD 26
 -04 patching guidelines.\n\nListed by CISA on 2026-08-19. More: https://pa
 tchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-64849
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2025-62593@patchsonar.com
DTSTAMP:20260817T000000Z
DTSTART;VALUE=DATE:20260820
DTEND;VALUE=DATE:20260821
SUMMARY:Patch deadline: Ray-Project Ray (CVE-2025-62593)
DESCRIPTION:Ray-Project Ray Code Injection Vulnerability\n\nRay-Project Ray
  contains a code injection vulnerability that could allow remote code exec
 ution. Developers using Ray as a development tool may be exposed to this v
 ulnerability exploitable through Firefox and Safari.\n\nCISA's required ac
 tion: Apply mitigations in accordance with vendor instructions\, ensuring 
 compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on 
 Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirem
 ents” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud
  services or discontinue use of the product if mitigations are unavailable
 . Stakeholders are responsible for evaluating each asset's internet exposu
 re and ensuring adherence to BOD 26-04 patching guidelines.\n\nListed by C
 ISA on 2026-08-17. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2025-62593
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-72898@patchsonar.com
DTSTAMP:20260811T000000Z
DTSTART;VALUE=DATE:20260814
DTEND;VALUE=DATE:20260815
SUMMARY:Patch deadline: Metabase Metabase (CVE-2026-72898)
DESCRIPTION:Metabase SQL Injection Vulnerability\n\nMetabase contains a SQL
  Injection vulnerability that allows an unauthenticated remote attacker to
  inject arbitrary SQL into the Metabase application database\, which can g
 ive them administrator access to the instance. From there\, the attacker c
 ould change the application configuration\, steal stored credentials for t
 he connected databases\, read any data accessible through those connection
 s\, and export data.\n\nCISA's required action: Apply mitigations in accor
 dance with vendor instructions\, ensuring compliance with CISA’s BOD 26-
 04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance
  and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll
 ow applicable BOD 26-04 guidance for cloud services or discontinue use of 
 the product if mitigations are unavailable. Stakeholders are responsible f
 or evaluating each asset's internet exposure and ensuring adherence to BOD
  26-04 patching guidelines.\n\nListed by CISA on 2026-08-11. More: https:/
 /patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-72898
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-63077@patchsonar.com
DTSTAMP:20260805T000000Z
DTSTART;VALUE=DATE:20260808
DTEND;VALUE=DATE:20260809
SUMMARY:Patch deadline: JetBrains TeamCity (CVE-2026-63077)
DESCRIPTION:JetBrains TeamCity Deserialization of Untrusted Data Vulnerabil
 ity\n\nJetBrains TeamCity contains a deserialization of untrusted data vul
 nerability that could allow unauthenticated remote code execution via the 
 agent polling protocol.\n\nCISA's required action: Apply mitigations in ac
 cordance with vendor instructions\, ensuring compliance with CISA’s BOD 
 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guida
 nce and CISA’s “Forensics Triage Requirements” (see URL in Notes). F
 ollow applicable BOD 26-04 guidance for cloud services or discontinue use 
 of the product if mitigations are unavailable. Stakeholders are responsibl
 e for evaluating each asset's internet exposure and ensuring adherence to 
 BOD 26-04 patching guidelines.\n\nCISA says ransomware groups are known to
  use this.\n\nListed by CISA on 2026-08-05. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-63077
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-9198@patchsonar.com
DTSTAMP:20260804T000000Z
DTSTART;VALUE=DATE:20260807
DTEND;VALUE=DATE:20260808
SUMMARY:Patch deadline: IBM Langflow (CVE-2026-9198)
DESCRIPTION:IBM Langflow Code Injection Vulnerability\n\nLangflow contains 
 a code injection vulnerability that allows unauthenticated attackers to ac
 hieve full remote code execution on default Langflow deployments.\n\nCISA'
 s required action: Apply mitigations in accordance with vendor instruction
 s\, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Upda
 tes Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Tr
 iage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guida
 nce for cloud services or discontinue use of the product if mitigations ar
 e unavailable. Stakeholders are responsible for evaluating each asset's in
 ternet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n
 \nListed by CISA on 2026-08-04. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-9198
TRANSP:TRANSPARENT
END:VEVENT
END:VCALENDAR