Topic
85 articles
Active ExploitCISA adds Splunk Enterprise vulnerability CVE-2026-20253 (CVSS 9.8) to KEV catalog following active exploitation targeting enterprise SIEM clusters.
MicrosoftCISA orders federal agencies to patch critical Microsoft SharePoint vulnerabilities CVE-2026-58644 and CVE-2026-56164 enabling unauthenticated remote code execution.
Threat IntelCISA adds SimpleHelp remote support platform vulnerability CVE-2026-48558 (CVSS 9.8) to KEV catalog following active exploitation against enterprise networks.
Active ExploitCISA adds N-able N-central vulnerability CVE-2026-18577 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against MSP management infrastructure.
Threat IntelCISA mandates urgent remediation of TrueConf Server vulnerability CVE-2026-72529 (CVSS 9.8) exploited in the wild to bypass administrative access controls.
Check PointCISA orders emergency remediation of Check Point SmartConsole flaw CVE-2026-16232, which allows network adversaries to bypass authentication on management servers.
Threat IntelCISA mandates immediate remediation of CVE-2026-18556, an unauthenticated alternate path bypass in N-able N-central allowing full MSP administrative takeover.
AppleCISA confirms active exploitation of CVE-2026-65400, an unauthenticated network authentication bypass in Apple macOS Screen Sharing enabling remote desktop seizure.
Threat IntelFederal agencies face urgent remediation deadlines as CISA confirms active exploitation of CVE-2023-49105, allowing attackers to access and delete cloud storage files without credentials.
SAP EnterpriseSAP released security updates for CVE-2026-58240, a CVSS 9.6 authentication bypass in NetWeaver AS Java/ABAP Message Server that permits enterprise takeover.
Citrix NetScalerCISA and threat researchers warn that CVE-2026-19490 in Citrix NetScaler ADC and Gateway is under active exploitation, granting unauthenticated access to perimeter gateways.
CiscoThreat actors and Qilin ransomware affiliates are actively weaponizing CVE-2026-20079 in Cisco Secure FMC to bypass web authentication and achieve root command execution.
Palo AltoA newly catalogued authentication bypass in Palo Alto Networks PAN-OS lets an unauthenticated attacker reach management functionality. Here is the exposure and the fix.