CISA KEV Catalog updates include CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384. These actively exploited flaws can fully compromise device security.
CVE-2023-49105
CVE-2023-49105 affecting ownCloud versions 10.6.0 to 10.13.0 has been made public, and a PoC exploit code is readily available
GreyNoise, a cybersecurity agency, has observed mass exploitation of the CVE-2023-49103 vulnerability as early as November 25, 2023
CVE-2023-49103 (CVSS score of 10) Disclosure of sensitive credentials and configuration in containerized deployments