Topic

CWE-20: news, advisories and analysis

5 articlesUpdated 13 Oct 2026

CyberSecureToday covers CWE-20 across 5 articles published between 17 Sep 2026 and 13 Oct 2026. The coverage includes 5 vulnerability advisories. 5 advisories are rated critical or high severity, and 3 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on CWE-20 most often intersect with CISA KEV, ISC BIND and BIND 9, with Technology, Cloud & SaaS the most affected sector. The most recent story, “ISC BIND 9 TKEY Flaw Exploited to Crash Authoritative DNS Servers”, was published 13 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
ISC BIND 9 TKEY Flaw Exploited to Crash Authoritative DNS Servers
ISC resolves a critical assertion failure defect in BIND 9 nameservers (CVE-2015-5477) where a single malformed TKEY query crashes DNS daemons remotely.
CST Editorial Desk13 Oct 20268 min read
ThreatsIndustrial & OTCritical
ABB Ability System 800xA Flaw Enables Remote Code Execution Across Industrial Substation Controllers
CISA and ABB have issued an emergency industrial advisory for CVE-2026-42918, a critical remote code execution vulnerability in ABB Ability System 800xA controllers.
Mei-Lin Chen7 Oct 20268 min read
ThreatsCloud & SaaSCritical
Google Cloud Vertex AI Prompt Armor Bypass Exposes Enterprise Agent RAG Pipelines
Google Cloud security bulletin resolves a filter evasion flaw in Vertex AI Prompt Armor allowing jailbreak payload delivery to enterprise RAG agents.
Aisha Noor6 Oct 20268 min read
ThreatsCloud & SaaSCritical
Arista VeloCloud Orchestrator Zero-Day Exploited to Hijack SD-WAN Edge Gateways
Arista confirms active in-the-wild exploitation of CVSS 10.0 CVE-2026-93952, allowing unauthenticated attackers to hijack on-prem VeloCloud Orchestrators.
CST Editorial Desk23 Sep 202617 min read
ThreatsCloud & SaaSHigh
Ubiquiti UniFi OS Input Validation Vulnerability CVE-2026-34910 Weaponized Against Enterprise Network Edge
CISA adds Ubiquiti UniFi OS vulnerability CVE-2026-34910 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation against network edge gateways.
Aisha Noor17 Sep 202613 min read

Latest coverage

ISC BIND 9 TKEY Flaw Exploited to Crash Authoritative DNS Servers

ABB Ability System 800xA Flaw Enables Remote Code Execution Across Industrial Substation Controllers

Google Cloud Vertex AI Prompt Armor Bypass Exposes Enterprise Agent RAG Pipelines

Arista VeloCloud Orchestrator Zero-Day Exploited to Hijack SD-WAN Edge Gateways

Ubiquiti UniFi OS Input Validation Vulnerability CVE-2026-34910 Weaponized Against Enterprise Network Edge