Search: “Oracle Access Manager”

U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog

CISA added the actively exploited Gitea RCE flaw CVE-2026-60004 (CVSS 9.8) to its KEV catalog, with federal patching due by August 28, 2026.

CISA added CVE-2026-60004, a critical remote code execution flaw in Gitea (CVSS 9.8), to its Known Exploited Vulnerabilities catalog. The flaw affects Gitea versions since 1.17, fixed in 1.27.1, and lets attackers with repository write access execute shell commands via the diffpatch API and Git hooks. Open registration allows unauthenticated attackers to create accounts and exploit exposed instances, with a reported attack deploying a cryptocurrency-miner-like payload.

Security Affairs·Aug 26, 08:44 UTC · 21d agoExploit / PoC in the wildCVE-2026-60004

CISA adds TP-Link, Apache, and Oracle bugs to its Known Exploited Vulnerabilities catalog

Security Affairs·May 2, 07:11 UTC · May 2, 2023Exploit / PoC in the wildCVE-2023-1389CVE-2021-45046CVE-2021-44228+1 CVEs

U.S. CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to its Known Exploited Vulnerabilities catalog

Security Affairs·Jul 6, 19:48 UTC · Jul 6, 2026Exploit / PoC in the wildCVE-2017-3066CVE-2024-20953CVE-2025-249891

U.S. CISA adds Dassault Systèmes DELMIA Apriso flaws to its Known Exploited Vulnerabilities catalog

Security Affairs·Oct 29, 08:39 UTC · Oct 29, 2025Exploit / PoC in the wildCVE-2025-6204CVE-2025-6205CVE-2025-5086

CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalog

Security Affairs·May 16, 19:39 UTC · May 16, 2023Exploit / PoC in the wildCVE-2023-25717CVE-2021-3560CVE-2014-0196+4 CVEs1

Deep dive in Lexmark Perceptive Document Filters Exploitation

Cisco Talos·Jun 14, 18:41 UTC · Jun 14, 2017Exploit / PoC

CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaign

CISA orders federal agencies to patch exploited Windows Winsock zero-day CVE-2026-68820 by August 25, used by Lazarus in Operation Dream Job.

CISA ordered federal agencies to patch Windows Winsock vulnerability CVE-2026-68820, rated 7/10, by August 25 after confirming exploitation; no workaround exists and a restart is required. Check Point found Lazarus Group hackers impersonated Lockheed Martin and Enveil recruiters on LinkedIn, sent malicious PDFs enabling long-term remote access, then used the zero-day to escalate from limited access to full system control. Targets spanned defense sectors including surveillance, drones and robotics in France, Germany, Brazil and India, as part of Operation Dream Job tracked since 2020.

The Record·Aug 12, 12:12 UTC · Aug 12, 2026Exploit / PoC in the wildCVE-2026-688201

VRT Guide To IDS Ruleset Tuning

Cisco Talos·Jan 8, 16:48 UTC · Jan 8, 2010Exploit / PoC in the wild

CVE-2026-34486: Apache Tomcat EncryptInterceptor Fail-Open Bypass

Technical analysis shows CVE-2026-34486 is a one-line fail-open regression in Tomcat Tribes enabling unauthenticated RCE via Java deserialization.

CVE-2026-34486 is a fail-open regression in Tomcat's Tribes EncryptInterceptor, introduced while fixing the CVE-2026-29146 padding-oracle flaw; Apache rated it Important and NVD scores it 7.5 High. Decryption failures are now forwarded to an unfiltered ObjectInputStream, and public PoC repositories demonstrate unauthenticated RCE on default port 4000 when clustering, the EncryptInterceptor, a reachable receiver and deserialization gadgets are all present. Affected releases 9.0.116, 10.1.53 and 11.0.20 are fixed in 9.0.117, 10.1.54 and 11.0.21; Tomcat 8.5 is unaffected.

Web discovery (articles for new exploits & KEV entries)·Sep 8, 20:09 UTC · 8d agoExploit / PoCCVE-2026-34486CVE-2026-291461