Topic
99 articles
CMS SecurityCISA incorporates WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 (CVSS 9.8) into KEV catalog following active in-the-wild web attacks.
LinuxCISA adds Red Hat ABRT vulnerability CVE-2015-5287 (CVSS 7.8) to KEV catalog following active exploitation against enterprise Linux host infrastructure.
Threat IntelCISA adds SimpleHelp remote support platform vulnerability CVE-2026-48558 (CVSS 9.8) to KEV catalog following active exploitation against enterprise networks.
Active ExploitCISA adds N-able N-central vulnerability CVE-2026-18577 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against MSP management infrastructure.
LinuxCISA adds Red Hat libuser vulnerability CVE-2015-3246 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation for root privilege escalation.
Threat IntelCISA adds DD-WRT gateway vulnerability CVE-2021-27137 (CVSS 9.8) to KEV catalog following active weaponization by botnets targeting network perimeter routers.
MicrosoftCISA adds Microsoft SQL Server vulnerability CVE-2019-1068 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against enterprise database clusters.
Threat IntelCISA mandates urgent remediation of TrueConf Server vulnerability CVE-2026-72529 (CVSS 9.8) exploited in the wild to bypass administrative access controls.
FortinetCISA adds Fortinet FortiSandbox vulnerabilities CVE-2026-25089 and CVE-2026-39808 (CVSS 9.8) to KEV following active attacks against enterprise security fabrics.
Active ExploitCISA adds Acronis Backup plugin vulnerability CVE-2026-87886 (CVSS 9.8) to its KEV catalog following active exploitation against cPanel and Plesk hosting infrastructure.
LinuxCISA adds Linux kernel watch queue vulnerability CVE-2022-0995 to its KEV catalog following widespread weaponization in cloud container breakout attacks.
CiscoCISA orders emergency patching of Cisco Identity Services Engine vulnerability CVE-2026-76460 (CVSS 9.8) enabling unauthenticated remote network policy takeover.
Threat IntelCISA flags Apache Tomcat vulnerability CVE-2026-34486 exploited in enterprise intrusions to intercept unencrypted session tokens and hijack authenticated user access.
GoogleCISA adds Google Pixel baseband modem flaw CVE-2026-58704 to its KEV catalog following active zero-day exploitation against high-value target devices.
MicrosoftCISA adds Microsoft SharePoint Server deserialization flaw CVE-2026-50522 (CVSS 9.8) to its KEV catalog following active exploitation against enterprise document farms.
Check PointCISA orders emergency remediation of Check Point SmartConsole flaw CVE-2026-16232, which allows network adversaries to bypass authentication on management servers.
Active ExploitCISA adds Oracle E-Business Suite privilege management flaw CVE-2026-46817 (CVSS 9.8) to its KEV catalog following active exploitation against cloud ERP deployments.
MicrosoftCISA flags Microsoft Active Directory Federation Services vulnerability CVE-2026-56155 (CVSS 9.8) exploited in attacks forging SAML claims across hybrid Azure clouds.
Active ExploitCISA adds CVE-2026-16812 to KEV, warning of active exploitation targeting on-premise Arista VeloCloud SD-WAN Orchestrator management appliances.
Threat IntelCISA mandates immediate remediation of CVE-2026-18556, an unauthenticated alternate path bypass in N-able N-central allowing full MSP administrative takeover.
FortinetCISA updates KEV with CVE-2025-68686, a critical information disclosure vulnerability in Fortinet FortiOS exploited to harvest active VPN session tokens.
CiscoCISA adds CVE-2026-20349 to KEV, warning of active exploitation targeting Cisco Secure Firewall ASA and FTD packet inspection engines.
MicrosoftCISA warns of in-the-wild exploitation of CVE-2026-68820, a use-after-free vulnerability in the Windows Ancillary Function Driver (afd.sys) granting SYSTEM privilege.
Active ExploitCISA alerts enterprises to active exploitation of CVE-2026-72898, a critical SQL injection flaw in Metabase analytics dashboards allowing database exfiltration.