1,062 articles
Crypto / Web3CISA adds Linux kernel cryptographic socket race condition vulnerability CVE-2025-39964 to KEV catalog following active root privilege escalation attacks.
LinuxCISA adds Linux kernel ebtables SNAT memory corruption flaw CVE-2026-53266 (CVSS 8.8) to KEV catalog following active hypervisor privilege escalation.
Active ExploitCISA orders federal agencies to patch Ubiquiti UniFi OS vulnerability CVE-2026-34909 enabling unauthenticated network configuration extraction and takeover.
LinuxCISA adds Linux kernel cgroups v1 release_agent vulnerability CVE-2022-0492 to KEV catalog as threat actors weaponize container breakout exploits.
Check PointCISA orders emergency patching of Check Point Security Gateway flaw CVE-2026-50751 enabling unauthenticated perimeter VPN bypass and network takeover.
CiscoCISA orders emergency remediation of Cisco Catalyst SD-WAN Manager flaws CVE-2026-20262 and CVE-2026-20245 enabling remote administrative root takeover.
Active ExploitCISA adds Splunk Enterprise vulnerability CVE-2026-20253 (CVSS 9.8) to KEV catalog following active exploitation targeting enterprise SIEM clusters.
Active ExploitCISA adds Ivanti Sentry vulnerability CVE-2026-10520 (CVSS 9.8) to KEV catalog following active zero-day exploitation against corporate mobile gateways.
OT / SCADACISA adds Lantronix EDS5000 industrial serial device server vulnerability CVE-2025-67038 to KEV catalog following active exploitation against OT networks.
CiscoCISA adds Cisco IOS HTTP server CSRF flaw CVE-2008-4128 to KEV catalog following active in-the-wild exploitation to alter router configuration registers.
OT / SCADACISA issues ICS-CERT advisory ICSA-26-211-07 warning of critical protocol implementation flaws in Mitsubishi Electric CC-Link IE TSN industrial controllers.
MicrosoftCISA orders federal agencies to patch critical Microsoft SharePoint vulnerabilities CVE-2026-58644 and CVE-2026-56164 enabling unauthenticated remote code execution.
OT / SCADACISA adds KNX industrial building automation protocol vulnerability CVE-2023-4346 to KEV catalog following active exploitation against critical OT facilities.
AWS CloudAWS publishes security advisory ALAS2023LIVEPATCH-2026-343 addressing a Linux kernel vhost vring metadata cache corruption vulnerability (CVE-2026-74580).
OT / SCADACISA issues advisory ICSA-26-258-04 warning of insufficiently protected credentials in Schneider Electric SCADAPack x70 Remote Telemetry Units (CVE-2026-81861).
Active ExploitCISA incorporates Adobe ColdFusion path traversal vulnerability CVE-2026-48282 (CVSS 9.8) into KEV catalog following active exploitation against enterprise application servers.
CiscoCISA adds Cisco Unified Communications Manager vulnerability CVE-2026-20230 (CVSS 8.5) to KEV catalog following active in-the-wild enterprise telephony attacks.
Threat IntelCISA adds Ubiquiti UniFi OS vulnerability CVE-2026-34910 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation against network edge gateways.
CMS SecurityCISA incorporates WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 (CVSS 9.8) into KEV catalog following active in-the-wild web attacks.
LinuxCISA adds Red Hat ABRT vulnerability CVE-2015-5287 (CVSS 7.8) to KEV catalog following active exploitation against enterprise Linux host infrastructure.
Threat IntelCISA adds SimpleHelp remote support platform vulnerability CVE-2026-48558 (CVSS 9.8) to KEV catalog following active exploitation against enterprise networks.
Active ExploitCISA adds N-able N-central vulnerability CVE-2026-18577 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against MSP management infrastructure.
LinuxCISA adds Red Hat libuser vulnerability CVE-2015-3246 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation for root privilege escalation.
Threat IntelCISA adds DD-WRT gateway vulnerability CVE-2021-27137 (CVSS 9.8) to KEV catalog following active weaponization by botnets targeting network perimeter routers.