CVSS 8.8: news, advisories and analysis

Latest coverage

• 

  Threats·Cloud & SaaSHigh

  Linux Kernel ebtables SNAT Out-of-Bounds Write Flaw Exploited in Active Attacks

  CISA adds Linux kernel ebtables SNAT memory corruption flaw CVE-2026-53266 (CVSS 8.8) to KEV catalog following active hypervisor privilege escalation.

  Mei-Lin Chen18 Sep 202610 min read
• 

  Threats·Cloud & SaaSHigh

  Ubiquiti UniFi OS Path Traversal Flaw Exploited to Hijack Gateways

  CISA orders federal agencies to patch Ubiquiti UniFi OS vulnerability CVE-2026-34909 enabling unauthenticated network configuration extraction and takeover.

  Priya Raman18 Sep 202612 min read
• 

  Threats·Cloud & SaaSHigh

  Cloud Container Escape: Linux Kernel cgroups Flaw CVE-2022-0492 Weaponized in Cloud Attacks

  CISA adds Linux kernel cgroups v1 release_agent vulnerability CVE-2022-0492 to KEV catalog as threat actors weaponize container breakout exploits.

  CST Editorial Desk18 Sep 202611 min read
• 

  Threats·Cloud & SaaSHigh

  Cisco IOS Cross-Site Request Forgery Flaw Exploited to Hijack Core Enterprise Routers

  CISA adds Cisco IOS HTTP server CSRF flaw CVE-2008-4128 to KEV catalog following active in-the-wild exploitation to alter router configuration registers.

  CST Editorial Desk18 Sep 202611 min read
• 

  Threats·Cloud & SaaSHigh

  Ubiquiti UniFi OS Input Validation Vulnerability CVE-2026-34910 Weaponized Against Enterprise Network Edge

  CISA adds Ubiquiti UniFi OS vulnerability CVE-2026-34910 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation against network edge gateways.

  Aisha Noor17 Sep 202613 min read
• 

  Threats·Energy & UtilitiesHigh

  AVEVA Pipeline Integrity Monitor Vulnerabilities Threaten Critical Energy Infrastructure

  CISA issued an energy sector ICS advisory warning of memory corruption and authentication defects in AVEVA Pipeline Integrity Monitor supervising oil and gas transport.

  Daniel Okafor14 Sep 20268 min read