U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Expedition, Android, CyberPanel, and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog.
CISA added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including Android privilege escalation, CyberPanel incorrect permissions, Nostromo nhttpd directory traversal, and Palo Alto Expedition missing authentication.
CVE-2024-43093 is an Android Framework Privilege Escalation Vulnerability actively exploited in the wild, allowing unauthorized access to Android directories.
CVE-2019-16278 is a directory traversal vulnerability in Nostromo nhttpd that enables remote code execution through crafted HTTP requests.