
Topic
Active Exploitation, page 2
News, analysis and practical guidance on Active Exploitation.
75 articles
ThreatsCloud & SaaSCriticalCST Newsroom
ThreatsCloud & SaaSHighRed Hat ABRT Crash Reporting Daemon Flaw CVE-2015-5287 Weaponized for Linux Root Privilege Escalation
Priya Raman
ThreatsCloud & SaaSCriticalSimpleHelp Remote Support Platform Critical Authentication Bypass CVE-2026-48558 in Active Attacks
Daniel Okafor
ThreatsCloud & SaaSCriticalN-able N-central Critical Authentication Bypass CVE-2026-18577 Exploited in MSP Supply Chain Attacks
Mei-Lin Chen
ThreatsCloud & SaaSHighRed Hat Enterprise Linux libuser Race Condition Flaw Exploited for Local Root Escalation
Tom Verhoeven
ThreatsCloud & SaaSCriticalDD-WRT Gateway Firmware Stack Buffer Overflow CVE-2021-27137 Weaponized in Network Perimeter Attacks
Aisha Noor
ThreatsCloud & SaaSCriticalMicrosoft SQL Server Memory Corruption RCE Flaw Exploited in Database Infiltration Attacks
CST Newsroom
ThreatsCloud & SaaSCriticalTrueConf Enterprise Server Authentication Bypass Flaw Weaponized to Access Communications
Priya Raman
ThreatsCloud & SaaSCriticalFortinet FortiSandbox Critical OS Command Injection Flaws CVE-2026-25089 & CVE-2026-39808 in Active Exploitation
Daniel Okafor
ThreatsCloud & SaaSCriticalAcronis Backup Critical Privilege Flaw CVE-2026-87886 Exploited Against Cloud Hosting Servers
Priya Raman
ThreatsCloud & SaaSHighLinux Kernel Watch Queue Privilege Escalation Flaw CVE-2022-0995 Weaponized in Cloud Attacks
Mei-Lin Chen
ThreatsCloud & SaaSCriticalCisco Identity Services Engine Critical API Flaw Weaponized to Compromise Network Access
Priya Raman
ThreatsCloud & SaaSHighApache Tomcat Session Data Exposure Flaw Weaponized in Credential Hijacking Attacks
Daniel Okafor
ThreatsCloud & SaaSCriticalGoogle Pixel Cellular Modem Zero-Day Flaw Exploited in Targeted Mobile Attacks
Priya Raman
ThreatsCloud & SaaSCriticalMicrosoft SharePoint Server Critical Deserialization Flaw CVE-2026-50522 Exploited in Active Attacks
Priya Raman
ThreatsCloud & SaaSCriticalCheck Point SmartConsole Authentication Bypass Flaw Exploited to Hijack Firewall Management
Daniel Okafor
ThreatsCloud & SaaSCriticalOracle E-Business Suite Critical Privilege Escalation Flaw CVE-2026-46817 Exploited in Enterprise Intrusions
Priya Raman
ThreatsCloud & SaaSCriticalMicrosoft ADFS Cloud Identity Privilege Escalation Flaw CVE-2026-56155 Under Active Exploitation
Daniel Okafor
ThreatsCloud & SaaSCriticalArista VeloCloud SD-WAN Orchestrator Critical Command Injection Flaw CVE-2026-16812 Exploited in the Wild
Priya Raman
ThreatsCloud & SaaSCriticalN-able N-central MSP Platform Authentication Bypass Flaw Weaponized in Perimeter Attacks
Daniel Okafor
ThreatsCloud & SaaSHighFortinet FortiOS SSL-VPN Sensitive Information Disclosure Flaw CVE-2025-68686 Actively Targeted for Initial Access
CST Newsroom
ThreatsCloud & SaaSCriticalCisco Secure Firewall ASA and FTD Critical Heap Inspection Flaw CVE-2026-20349 Weaponized in the Wild
Priya Raman
ThreatsCloud & SaaSHighMicrosoft Windows WinSock Driver Zero-Day Flaw CVE-2026-68820 Exploited by Ransomware Groups for SYSTEM Takeover
Daniel Okafor
ThreatsCloud & SaaSCriticalMetabase Business Intelligence SQL Injection Flaw Exploited to Breach Analytics Warehouses
CST Newsroom