LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Kan

1 CVEs published in the last four months and 2 stories. Exploited flaws first.

Critical0
High1
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-322558.6highkanKan is an open-source project management tool.207d ago

Filter the full tracker by Kan →

Our coverage of Kan

CVE-2026-32255high

Kan Project Management Tool SSRF Flaw Exploited, Not on CISA KEV

A server-side request forgery vulnerability in the Kan project management tool has been confirmed as exploited. The flaw, CVE-2026-32255, has been listed on VulnCheck's Known Exploited Vulnerabilities catalog but not yet on CISA's.

breach

Welcoming the Sri Lankan Government to Have I Been Pwned

The Sri Lankan government has officially joined Have I Been Pwned's (HIBP) free government service, becoming the 48th government to be onboarded. This integration provides Sri Lanka CERT with direct access to monitor government domains for exposed accounts within HIBP's extensive database of breached credentials.