60
CISA Urges Software Makers to Eliminate OS Command Injection Flaws
60
Coolify Discloses 11 Critical Flaws Enabling Full Server Compromise on Self
60
60
60
60
60
60
60
60
60
U.S. CISA adds Microsoft Windows, Zyxel device flaws to its Known Exploited Vulnerabilities catalog
60
60
SonicWall's SMA1000 boxes under active attack again
SonicWall warns attackers are chaining two SMA1000 zero-days, a CVSS 10.0 SSRF and command injection, to compromise VPN gateways.
SonicWall says attackers are actively exploiting two chained zero-days in SMA 1000 appliances: CVE-2026-83548, a pre-authentication SSRF rated CVSS 10.0, and CVE-2026-83549, a post-authentication OS command injection (CVSS 7.8) in the Appliance Management Console. Hotfixes are available for SMA 6210, 7210, and 8200v appliances with no workarounds; SonicWall recommends reimaging compromised devices, rotating passwords, and resetting TOTP tokens. NHS England assesses further exploitation as almost certain, following a similar exploited pair in July when CISA added CVE-2026-15409 to its KEV catalog.
78
60
60
US CISA added 17 flaws to its Known Exploited Vulnerabilities Catalog
60
60
60
60
CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild
60
60
60
CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog
60
60
Zyxel addressed critical flaw CVE-2023
60
60
60
60
Network Attack Trends: February
60
60
60
60
60
U.S. CISA adds Ivanti CSA and Fortinet bugs to its Known Exploited Vulnerabilities catalog
60
CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems
60
60
Threat Brief: VMware Vulnerabilities Exploited in the Wild (CVE-2022
60
60
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero
60