Network Security Trends: May
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-11978 | Authenticated Command Injection via Example DAGs in Apache Airflow (<=1.10.10) | 8.8 | 99% | KEVPoC ×2 | KEV |
| CVE-2020-13927 | Authentication Bypass in Apache Airflow's Experimental API | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2021-27850 | A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry | 9.8 | 94% | PoC |
From the original article
9 min read at unit42.paloaltonetworks.com
Unit 42 researchers continue to observe network security trends, tracking how cybercriminals take advantage of vulnerabilities in the real world. The following sections present our analysis of the most recently published vulnerabilities, including their severity and category distribution.
By Yue Guan, Lei Xu · unit42.paloaltonetworks.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.