CVE-2023-22894

Everything Threat Times has reported about CVE-2023-22894: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

CISA adds five exploited vulnerabilities to KEV catalog with 2026-10-11 due date

Threat TimesOct 12, 2026

The Cybersecurity and Infrastructure Security Agency added five new entries to its Known Exploited Vulnerabilities catalog, setting a remediation deadline of October 11, 2026.

Vulnerabilities

CISA Adds Strapi Admin Data Leak to Known Exploited Vulnerabilities Catalog

Threat TimesOct 8, 2026

Strapi CVE-2023-22894 allows attackers with admin access to infer sensitive user details via query filters.