Vulnerabilities
ONLYOFFICE Docs RCE via path traversal gets CISA KEV status, federal deadline Oct 11
Federal agency mandates urgent action for critical remote code execution flaw in document server software.
CISA
Everything Payload Report has reported about CISA: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Apache Struts RCE via DMI: Agencies Must Patch CVE-2016-3081 by Oct 11 After KEV Catalog Listing
Federal agencies must address CVE-2016-3081 in Apache Struts by mid-October following its addition to the Known Exploited Vulnerabilities catalog.