Week in review: ScreenConnect servers open to attack, exploited Microsoft SharePoint flaw
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20131 | Unauthenticated Java Deserialization RCE in Cisco FMC and SCC | 10.0 | 44% | KEVRansomwarePoC | KEV |
| CVE-2026-20963 | Deserialization RCE in Microsoft SharePoint Exploited in the Wild | 9.8 | 29% | KEV | KEV |
| CVE-2026-3564 | A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain… | 9.0 | <1% |
From the original article
11 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: In this Help Net Security interview, Packsize CSO Troy Rydman breaks down the biggest vulnerabilities in smart factory environments today, from IoT devices and legacy systems to human error. He explains how unmanaged devices, from sensors to robotic components, often go unpatched and become entry points for attackers.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.