Eclypsium report details exploited flaws in firewalls, VPNs and network appliances
InfraTrust tracked 133 new advisories covering 2,813 vulnerabilities in a month; 16 advisories involved actively exploited KEV-listed flaws.
90
Organization
Eclypsium
- Mentions · 7d0
- Mentions · 30d2
- All mentions5
- First seenSep 8, 2026
- Last mentioned14d ago
Timeline
5 articles · newest first16-year-old EDK II PXE buffer overflow runs code before Secure Boot
CVE-2026-97631 lets an adjacent-network attacker hang or hijack network boots on servers, and no stable EDK II release ships the fix yet.
70
InfraTrust report warns network management systems under attack
Active exploitation of critical Cisco and SonicWall management system vulnerabilities is a major trend, with attackers chaining flaws and deploying ransomware.
90
VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass
CERT warns vendor-signed UEFI shells from Acer, Dell, and others can bypass Secure Boot.
76
VU#718077: UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot
CERT/CC details VU#718077: UEFI Shell embedded in SPI flash lets attackers bypass Secure Boot and execute pre-boot code; patches issued.
55
Related CVEs
by mentions- CVE-2026-8510254%9.8Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-1146251%9.4SQL injection in Arista VeloCloud Orchestrator grants superuser
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-10493589%8.6Auth Bypass to Command Execution in Ivanti Connect Secure
- CVE-2026-2031635%5.3Hard-Coded Password Vulnerability in Cisco Secure Firewall Management Center
- CVE-2026-91843<1%9.8Unauthenticated stack overflow gives root RCE in Check Point login process
- CVE-2026-33197<1%8.7Privileged local BIOS code execution in AMI Aptio V (incomplete input validation)
- CVE-2026-20293<1%7.1Secure Boot Bypass via UEFI Shell in Cisco UCS Servers and UCS-based Appliances
Appears with
- Ciscovendor · 2
- UEFI Shellproduct · 2
- CERT/CCorganization · 2
- AMIvendor · 2
- Cisco Secure Firewall Management Centerproduct · 1
- Eurosoftvendor · 1
- CISAorganization · 1
- Cisco Secure Email Gatewayproduct · 1
- Cisco Identity Services Engineproduct · 1
- AMI Aptioproduct · 1
- Cisco UCS Serversproduct · 1
- PHPvendor · 1
- edk2product · 1
- Debianvendor · 1
- Check Point Security Management Serverproduct · 1
- Red Hatvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.