BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Patch Sonar//CISA patch deadlines//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Patch Sonar deadlines: Servers\, cloud & backup
X-WR-CALDESC:Federal fix deadlines for actively exploited vulnerabilities\,
  from CISA's KEV catalog. patchsonar.com
REFRESH-INTERVAL;VALUE=DURATION:PT6H
X-PUBLISHED-TTL:PT6H
BEGIN:VEVENT
UID:CVE-2026-41709@patchsonar.com
DTSTAMP:20261028T000000Z
DTSTART;VALUE=DATE:20261111
DTEND;VALUE=DATE:20261112
SUMMARY:Patch deadline: Broadcom VMware ESX (CVE-2026-41709)
DESCRIPTION:Broadcom VMWare ESX Insufficient Logging Vulnerability\n\nBroad
 com VMWare ESX contains an insufficient logging vulnerability that could a
 llow a malicious actor with admin access to perform certain operations wit
 hout being logged.\n\nCISA's required action: Apply mitigations in accorda
 nce with vendor instructions\, ensuring compliance with CISA’s BOD 26-04
  Prioritizing Security Updates Based on Risk (see URL in Notes) guidance a
 nd CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow
  applicable BOD 26-04 guidance for cloud services or discontinue use of th
 e product if mitigations are unavailable. Stakeholders are responsible for
  evaluating each asset's internet exposure and ensuring adherence to BOD 2
 6-04 patching guidelines.\n\nListed by CISA on 2026-10-28. More: https://p
 atchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-41709
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-46300@patchsonar.com
DTSTAMP:20261028T000000Z
DTSTART;VALUE=DATE:20261031
DTEND;VALUE=DATE:20261101
SUMMARY:Patch deadline: Linux Kernel (CVE-2026-46300)
DESCRIPTION:Linux Kernel Missing Initialization of a Variable Vulnerability
 \n\nLinux Kernel contains a missing initialization of a variable vulnerabi
 lity that could allow for unintended modification of page-cache-backed dat
 a via failure to preserve the shared-fragment marker during socket buffer 
 coalescing\, causing ESP input processing to decrypt shared fragments in p
 lace. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-
 109619 to implant PHP webshells and run commands as root.\n\nCISA's requir
 ed action: Apply mitigations in accordance with vendor instructions\, ensu
 ring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Base
 d on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Req
 uirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for 
 cloud services or discontinue use of the product if mitigations are unavai
 lable. Stakeholders are responsible for evaluating each asset's internet e
 xposure and ensuring adherence to BOD 26-04 patching guidelines.\n\nListed
  by CISA on 2026-10-28. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-46300
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-105133@patchsonar.com
DTSTAMP:20261014T000000Z
DTSTART;VALUE=DATE:20261017
DTEND;VALUE=DATE:20261018
SUMMARY:Patch deadline: Ahsay AhsayCBS (CVE-2026-105133)
DESCRIPTION:Ahsay AhsayCBS Improper Authentication Vulnerability\n\nAhsay A
 hsayCBS contains an improper authentication vulnerability that could allow
  a remote attacker to bypass authentication via manipulation of the random
  parameter in the API component’s checkSysPwd function. This vulnerabili
 ty can be chained with CVE-2026-105134.\n\nCISA's required action: Apply m
 itigations in accordance with vendor instructions\, ensuring compliance wi
 th CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL
  in Notes) guidance and CISA’s “Forensics Triage Requirements” (see 
 URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or 
 discontinue use of the product if mitigations are unavailable. Stakeholder
 s are responsible for evaluating each asset's internet exposure and ensuri
 ng adherence to BOD 26-04 patching guidelines.\n\nListed by CISA on 2026-1
 0-14. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-105133
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-105134@patchsonar.com
DTSTAMP:20261014T000000Z
DTSTART;VALUE=DATE:20261017
DTEND;VALUE=DATE:20261018
SUMMARY:Patch deadline: Ahsay AhsayCBS (CVE-2026-105134)
DESCRIPTION:Ahsay AhsayCBS Command Injection Vulnerability\n\nAhsay AhsayCB
 S contains a command injection vulnerability that could allow a remote att
 acker to execute operating system commands via manipulation of the random 
 parameter in the Replication Receiver component’s /rps/api/json/UpdateRe
 ceivers.do endpoint. This vulnerability can be chained with CVE-2026-10513
 3.\n\nCISA's required action: Apply mitigations in accordance with vendor 
 instructions\, ensuring compliance with CISA’s BOD 26-04 Prioritizing Se
 curity Updates Based on Risk (see URL in Notes) guidance and CISA’s “F
 orensics Triage Requirements” (see URL in Notes). Follow applicable BOD 
 26-04 guidance for cloud services or discontinue use of the product if mit
 igations are unavailable. Stakeholders are responsible for evaluating each
  asset's internet exposure and ensuring adherence to BOD 26-04 patching gu
 idelines.\n\nListed by CISA on 2026-10-14. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-105134
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2015-5477@patchsonar.com
DTSTAMP:20261008T000000Z
DTSTART;VALUE=DATE:20261011
DTEND;VALUE=DATE:20261012
SUMMARY:Patch deadline: ISC BIND (CVE-2015-5477)
DESCRIPTION: ISC BIND Data Processing Errors Vulnerability\n\nISC BIND cont
 ains a data processing errors vulnerability that could allow remote attack
 ers to cause a denial of service via TKEY queries.\n\nCISA's required acti
 on: Apply mitigations in accordance with vendor instructions\, ensuring co
 mpliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Ri
 sk (see URL in Notes) guidance and CISA’s “Forensics Triage Requiremen
 ts” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud s
 ervices or discontinue use of the product if mitigations are unavailable. 
 Stakeholders are responsible for evaluating each asset's internet exposure
  and ensuring adherence to BOD 26-04 patching guidelines.\n\nListed by CIS
 A on 2026-10-08. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2015-5477
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2025-39682@patchsonar.com
DTSTAMP:20260918T000000Z
DTSTART;VALUE=DATE:20260921
DTEND;VALUE=DATE:20260922
SUMMARY:Patch deadline: Linux Kernel (CVE-2025-39682)
DESCRIPTION:Linux Kernel Improper Check for Unusual or Exceptional Conditio
 ns Vulnerability\n\nLinux Kernel contains an improper check for unusual or
  exceptional conditions vulnerability in the TLS receive path which allows
  a zero-length record retrieved from the rx_list to bypass the intended re
 cvmsg() record-type handling\, potentially causing subsequent TLS records 
 to be processed using incorrect zero-copy and queuing assumptions. The imp
 acted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). U
 sers are advised to discontinue use and/or transition to a supported versi
 on.\n\nCISA's required action: Apply mitigations in accordance with vendor
  instructions\, ensuring compliance with CISA’s BOD 26-04 Prioritizing S
 ecurity Updates Based on Risk (see URL in Notes) guidance and CISA’s “
 Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD
  26-04 guidance for cloud services or discontinue use of the product if mi
 tigations are unavailable. Stakeholders are responsible for evaluating eac
 h asset's internet exposure and ensuring adherence to BOD 26-04 patching g
 uidelines.\n\nListed by CISA on 2026-09-18. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2025-39682
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2025-39964@patchsonar.com
DTSTAMP:20260918T000000Z
DTSTART;VALUE=DATE:20260921
DTEND;VALUE=DATE:20260922
SUMMARY:Patch deadline: Linux Kernel (CVE-2025-39964)
DESCRIPTION:Linux Kernel Race Condition Vulnerability\n\nLinux Kernel conta
 ins a race condition vulnerability which allows concurrent writes to the s
 ame AF_ALG socket causing data to be unpredictably interleaved and creatin
 g inconsistencies in the socket's internal state.\n\nCISA's required actio
 n: Apply mitigations in accordance with vendor instructions\, ensuring com
 pliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Ris
 k (see URL in Notes) guidance and CISA’s “Forensics Triage Requirement
 s” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud se
 rvices or discontinue use of the product if mitigations are unavailable. S
 takeholders are responsible for evaluating each asset's internet exposure 
 and ensuring adherence to BOD 26-04 patching guidelines.\n\nListed by CISA
  on 2026-09-18. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2025-39964
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-53266@patchsonar.com
DTSTAMP:20260918T000000Z
DTSTART;VALUE=DATE:20260921
DTEND;VALUE=DATE:20260922
SUMMARY:Patch deadline: Linux Kernel (CVE-2026-53266)
DESCRIPTION:Linux Kernel Out-of-Bounds Write Vulnerability\n\nLinux Kernel 
 contains an out-of-bounds write vulnerability in the ebtables SNAT target 
 which allows an ARP sender hardware address rewrite to write directly into
  a nonlinear socket-buffer fragment backed by a splice-imported file page.
  The impacted product(s) could be end-of-life (EoL) and/or end-of-service 
 (EoS). Users are advised to discontinue use and/or transition to a support
 ed version.\n\nCISA's required action: Apply mitigations in accordance wit
 h vendor instructions\, ensuring compliance with CISA’s BOD 26-04 Priori
 tizing Security Updates Based on Risk (see URL in Notes) guidance and CISA
 ’s “Forensics Triage Requirements” (see URL in Notes). Follow applic
 able BOD 26-04 guidance for cloud services or discontinue use of the produ
 ct if mitigations are unavailable. Stakeholders are responsible for evalua
 ting each asset's internet exposure and ensuring adherence to BOD 26-04 pa
 tching guidelines.\n\nListed by CISA on 2026-09-18. More: https://patchson
 ar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-53266
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-87886@patchsonar.com
DTSTAMP:20260916T000000Z
DTSTART;VALUE=DATE:20260919
DTEND;VALUE=DATE:20260920
SUMMARY:Patch deadline: Acronis Backup (CVE-2026-87886)
DESCRIPTION:Acronis Backup Incorrect Default Permissions Vulnerability\n\nA
 cronis Backup plugin for cPanel & WHM and extension for Plesk contains an 
 incorrect default permissions vulnerability that could allow for privilege
  escalation.\n\nCISA's required action: Apply mitigations in accordance wi
 th vendor instructions\, ensuring compliance with CISA’s BOD 26-04 Prior
 itizing Security Updates Based on Risk (see URL in Notes) guidance and CIS
 A’s “Forensics Triage Requirements” (see URL in Notes). Follow appli
 cable BOD 26-04 guidance for cloud services or discontinue use of the prod
 uct if mitigations are unavailable. Stakeholders are responsible for evalu
 ating each asset's internet exposure and ensuring adherence to BOD 26-04 p
 atching guidelines.\n\nListed by CISA on 2026-09-16. More: https://patchso
 nar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-87886
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-53362@patchsonar.com
DTSTAMP:20260827T000000Z
DTSTART;VALUE=DATE:20260830
DTEND;VALUE=DATE:20260831
SUMMARY:Patch deadline: Linux Kernel (CVE-2026-53362)
DESCRIPTION:Linux Kernel Unspecified Vulnerability\n\nLinux Kernel contains
  an unspecified vulnerability that can allow for privilege escalation via 
 IPv6 networking subsystem. This vulnerability can impact multiple products
 \, including but not limited to Suse\, Red Hat\, and other products using 
 Linux. \n\nCISA's required action: Apply mitigations in accordance with ve
 ndor instructions\, ensuring compliance with CISA’s BOD 26-04 Prioritizi
 ng Security Updates Based on Risk (see URL in Notes) guidance and CISA’s
  “Forensics Triage Requirements” (see URL in Notes). Follow applicable
  BOD 26-04 guidance for cloud services or discontinue use of the product i
 f mitigations are unavailable. Stakeholders are responsible for evaluating
  each asset's internet exposure and ensuring adherence to BOD 26-04 patchi
 ng guidelines.\n\nListed by CISA on 2026-08-27. More: https://patchsonar.c
 om/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-53362
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2015-3246@patchsonar.com
DTSTAMP:20260826T000000Z
DTSTART;VALUE=DATE:20260909
DTEND;VALUE=DATE:20260910
SUMMARY:Patch deadline: Red Hat Libuser (CVE-2015-3246)
DESCRIPTION:Red Hat Libuser Race Condition Vulnerability\n\nRed Hat libuser
  contains a race condition vulnerability that allows authenticated local u
 sers to corrupt the /etc/passwd file to cause a denial of service or privi
 lege escalation. \n\nCISA's required action: Apply mitigations in accordan
 ce with vendor instructions\, ensuring compliance with CISA’s BOD 26-04 
 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance an
 d CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow 
 applicable BOD 26-04 guidance for cloud services or discontinue use of the
  product if mitigations are unavailable. Stakeholders are responsible for 
 evaluating each asset's internet exposure and ensuring adherence to BOD 26
 -04 patching guidelines.\n\nListed by CISA on 2026-08-26. More: https://pa
 tchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2015-3246
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2015-5287@patchsonar.com
DTSTAMP:20260826T000000Z
DTSTART;VALUE=DATE:20260909
DTEND;VALUE=DATE:20260910
SUMMARY:Patch deadline: Red Hat Automatic Bug Reporting Tool (CVE-2015-5287
 )
DESCRIPTION:Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulne
 rability\n\nRed Hat Automatic Bug Reporting Tool (ABRT) contains a privile
 ge escalation vulnerability that could allow local users with certain perm
 issions to gain privileges via a symlink attack on a file with a predictab
 le name. The impacted product(s) could be end-of-life (EoL) and/or end-of-
 service (EoS). Users are advised to discontinue use and/or transition to a
  supported version.\n\nCISA's required action: Apply mitigations in accord
 ance with vendor instructions\, ensuring compliance with CISA’s BOD 26-0
 4 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance 
 and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follo
 w applicable BOD 26-04 guidance for cloud services or discontinue use of t
 he product if mitigations are unavailable. Stakeholders are responsible fo
 r evaluating each asset's internet exposure and ensuring adherence to BOD 
 26-04 patching guidelines.\n\nListed by CISA on 2026-08-26. More: https://
 patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2015-5287
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2019-1068@patchsonar.com
DTSTAMP:20260826T000000Z
DTSTART;VALUE=DATE:20260829
DTEND;VALUE=DATE:20260830
SUMMARY:Patch deadline: Microsoft SQL Server (CVE-2019-1068)
DESCRIPTION:Microsoft SQL Server Remote Code Execution Vulnerability\n\nMic
 rosoft SQL Server contains a remote code execution vulnerability that coul
 d allow an attacker to execute code in the context of the SQL Server Datab
 ase Engine service account.\n\nCISA's required action: Apply mitigations i
 n accordance with vendor instructions\, ensuring compliance with CISA’s 
 BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) g
 uidance and CISA’s “Forensics Triage Requirements” (see URL in Notes
 ). Follow applicable BOD 26-04 guidance for cloud services or discontinue 
 use of the product if mitigations are unavailable. Stakeholders are respon
 sible for evaluating each asset's internet exposure and ensuring adherence
  to BOD 26-04 patching guidelines.\n\nListed by CISA on 2026-08-26. More: 
 https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2019-1068
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2022-0995@patchsonar.com
DTSTAMP:20260826T000000Z
DTSTART;VALUE=DATE:20260829
DTEND;VALUE=DATE:20260830
SUMMARY:Patch deadline: Linux Kernel (CVE-2022-0995)
DESCRIPTION:Linux Kernel Out-of-Bounds Write Vulnerability\n\nLinux Kernel 
 contains an out-of-bounds memory write vulnerability which could allow a l
 ocal user to gain privileged access or cause a denial of service on the sy
 stem.\n\nCISA's required action: Apply mitigations in accordance with vend
 or instructions\, ensuring compliance with CISA’s BOD 26-04 Prioritizing
  Security Updates Based on Risk (see URL in Notes) guidance and CISA’s 
 “Forensics Triage Requirements” (see URL in Notes). Follow applicable 
 BOD 26-04 guidance for cloud services or discontinue use of the product if
  mitigations are unavailable. Stakeholders are responsible for evaluating 
 each asset's internet exposure and ensuring adherence to BOD 26-04 patchin
 g guidelines.\n\nListed by CISA on 2026-08-26. More: https://patchsonar.co
 m/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2022-0995
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-21962@patchsonar.com
DTSTAMP:20260824T000000Z
DTSTART;VALUE=DATE:20260827
DTEND;VALUE=DATE:20260828
SUMMARY:Patch deadline: Oracle HTTP Server and Oracle Weblogic Server Proxy
  Plug-in (CVE-2026-21962)
DESCRIPTION:Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Imp
 roper Access Control Vulnerability\n\nOracle HTTP Server and Oracle Weblog
 ic Server Proxy Plug-in contain an improper access control vulnerability t
 hat can result in unauthorized creation\, deletion or modification access 
 to critical data as well as unauthorized access to critical data or comple
 te access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-
 in accessible data.\n\nCISA's required action: Apply mitigations in accord
 ance with vendor instructions\, ensuring compliance with CISA’s BOD 26-0
 4 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance 
 and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follo
 w applicable BOD 26-04 guidance for cloud services or discontinue use of t
 he product if mitigations are unavailable. Stakeholders are responsible fo
 r evaluating each asset's internet exposure and ensuring adherence to BOD 
 26-04 patching guidelines.\n\nListed by CISA on 2026-08-24. More: https://
 patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-21962
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-59310@patchsonar.com
DTSTAMP:20260818T000000Z
DTSTART;VALUE=DATE:20260821
DTEND;VALUE=DATE:20260822
SUMMARY:Patch deadline: Broadcom VMware vCenter (CVE-2026-59310)
DESCRIPTION:Broadcom VMware vCenter Path Traversal Vulnerability\n\nBroadco
 m VMware vCenter contains a path traversal vulnerability which could allow
  a threat actor with network access to vCenter to execute arbitrary code.\
 n\nCISA's required action: Apply mitigations in accordance with vendor ins
 tructions\, ensuring compliance with CISA’s BOD 26-04 Prioritizing Secur
 ity Updates Based on Risk (see URL in Notes) guidance and CISA’s “Fore
 nsics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-
 04 guidance for cloud services or discontinue use of the product if mitiga
 tions are unavailable. Stakeholders are responsible for evaluating each as
 set's internet exposure and ensuring adherence to BOD 26-04 patching guide
 lines.\n\nCISA says ransomware groups are known to use this.\n\nListed by 
 CISA on 2026-08-18. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-59310
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-34486@patchsonar.com
DTSTAMP:20260804T000000Z
DTSTART;VALUE=DATE:20260807
DTEND;VALUE=DATE:20260808
SUMMARY:Patch deadline: Apache Tomcat (CVE-2026-34486)
DESCRIPTION:Apache Tomcat Missing Encryption of Sensitive Data Vulnerabilit
 y\n\nApache Tomcat contains a missing encryption of sensitive data vulnera
 bility that allows the bypass of the EncryptInterceptor. This vulnerabilit
 y can be chained with CVE‑2025‑24813.\n\nCISA's required action: Apply
  mitigations in accordance with vendor instructions\, ensuring compliance 
 with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see U
 RL in Notes) guidance and CISA’s “Forensics Triage Requirements” (se
 e URL in Notes). Follow applicable BOD 26-04 guidance for cloud services o
 r discontinue use of the product if mitigations are unavailable. Stakehold
 ers are responsible for evaluating each asset's internet exposure and ensu
 ring adherence to BOD 26-04 patching guidelines.\n\nListed by CISA on 2026
 -08-04. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-34486
TRANSP:TRANSPARENT
END:VEVENT
END:VCALENDAR