Arista says VeloCloud Orchestrator flaw CVE-2026-114625 is exploited
Builds before 5.2.3.18, 6.1.3.10, and 6.4.2.12 are affected; Canada's Cyber Centre urges available updates.
Stories per day · 30 days
17 RSS
Relatedarista1asyncos1authentication-bypass1beyondtrust1cccs1cisa1cisco1cve-2026-765191dll-sideloading1email-security1fortinet1kev1orchestrator1path-traversal1redis1sd-wan1secure-email-gateway1siemens1
52 stories, newest first · one card per story
Stories tagged #actively-exploited
Siemens Software Center DLL sideloading flaw exploited in the wild
CVE-2026-110936 affects Siemens Software Center before V4.0.9.8, and Siemens reports active exploitation.
Redis flaws include CVE-2026-25243, reported exploited in the wild
Canada’s Cyber Centre says open-source reporting shows CVE-2026-25243 is exploited and urges Redis updates.
8
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added actively exploited Fortinet and BeyondTrust flaws to the Known Exploited Vulnerabilities catalog.
Cisco warns of actively exploited Secure Email Gateway flaw
Cisco says attackers are exploiting CVE-2026-76519 in Secure Email Gateway to run root commands via crafted attachments.
4
CISA Adds Actively Exploited Apache Struts Command Injection Flaw to KEV Catalog
CISA added actively exploited Apache Struts command-injection flaw CVE-2016-3081 to the KEV catalog.
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
CISA orders agencies to patch actively exploited Citrix NetScaler flaw CVE-2026-88779, a confirmed denial-of-service bug.
CISA Flags Citrix NetScaler Flaw Exploited in Ongoing Attacks
CISA added actively exploited Citrix NetScaler CVE-2026-88779, an unauthenticated denial-of-service flaw, to the KEV catalog.
Citrix NetScaler SAML 0-Day Vulnerability Actively Exploited in Attacks
Citrix patched actively exploited NetScaler SAML zero-day CVE-2026-88779, which can deny service on ADC and Gateway appliances.
Fortinet FortiMail Path Traversal Flaw Actively Exploited to Compromise Servers
Attackers are exploiting critical FortiMail path-traversal CVE-2026-104286 to write files and compromise email appliances.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Fortinet FortiMail path traversal CVE-2026-104286 to the KEV catalog.
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
CISA added actively exploited Cisco Catalyst SD-WAN Manager auth bypass CVE-2026-76504 to the KEV catalog.
U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog
CISA lists actively exploited Cisco SD-WAN Manager flaw CVE-2026-76504 in the KEV catalog.
Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild
Cisco warns CVE-2026-76504, a critical SD-WAN Manager auth bypass, is being actively exploited.
CVE-2026-76504 | Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability | Reversed by Horizon3
Actively exploited Cisco SD-WAN Manager flaw CVE-2026-76504 bypasses API authentication for admin access.
Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
Cisco says CVE-2026-76504, a critical SD-WAN Manager API authentication bypass, is being exploited in the wild.
5
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Cisco Catalyst SD-WAN Manager flaw CVE-2026-76504 to the Known Exploited Vulnerabilities catalog.
CISA Warns of Microsoft SharePoint Code Injection Vulnerability Exploited in Attacks
CISA added actively exploited SharePoint code-injection flaw CVE-2026-65660 to the KEV catalog, with federal fixes due September 28.
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
NCSC warns exploited Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 allow remote compromise.
Certainties in life: Death, taxes, and critical Citrix vulns under attack
Citrix says critical NetScaler flaws, including unauthenticated RCE, are under active global attack; CISA alerted defenders.
Citrix Confirms NetScaler Zero-Day RCE Flaws Actively Exploited in Attacks
Citrix confirms two critical NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, are actively exploited for remote code execution.
Citrix Confirms NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attack
Citrix confirms attackers are exploiting two critical unauthenticated NetScaler RCE zero-days, CVE-2026-88771 and CVE-2026-88772.
2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
CERT-EU warns two critical Citrix NetScaler RCE flaws are exploited in the wild and urges immediate patching.
Hackers Actively Exploiting WordPress Vulnerability to Execute Malicious Code
Attackers are exploiting WordPress LFI CVE-2026-87902 to write malicious PHP and seek remote code execution.
8