Section

Security

Breaches, disclosures, and the defensive response.

327 stories · page 7 of 11

Security, stories 181 to 210

181Fortinet FortiMail Path-Traversal Flaw Exploited Before Fixes ShipCVE-2026-104286 lets an unauthenticated attacker write files to a FortiMail appliance, and one analyst reading of Fortinet's advisory says the patched builds may not be downloadable yet.Oct 2
182Citrix Confirms Two NetScaler Zero-Days Exploited Since Early SeptemberPalo Alto Networks' Unit 42 traces exploitation of CVE-2026-88771 and CVE-2026-88772 to Sept. 4, 23 days before Citrix published its bulletin, and says patching will not evict an attacker who is already inside.Oct 2
183Cisco SD-WAN Manager Auth Bypass Exploited, With No WorkaroundCVE-2026-76504 gives an unauthenticated attacker admin access to the Catalyst SD-WAN Manager API, and Cisco's only advice besides patching is to keep the interface off untrusted networks.Oct 2
184Three Exploited Edge Flaws Test CISA's Three-Day Patch DeadlineCitrix, Cisco and Fortinet appliances landed in the Known Exploited Vulnerabilities catalog within five days, and BOD 26-04 asks agencies to collect evidence before they patch any of them.Oct 2
185Monta's EV Charging Platform Has No Patch for a 9.4 Authentication GapCISA lists four flaws in monta.app, all versions. The vendor points operators to an optional OCPP security profile and has shipped no fix.Oct 1
186Johnson Controls EasyIO Neo Firmware V3.3b64 Fixes a Cleartext Login FlawTwo CISA advisories on the same building controllers rate one flaw 3.5 and the other 5.4. The lower numbers depend on assumptions about where the controller sits.Oct 1
187Armatura One Ships an Exposed ActiveMQ Listener and Five Other Flaws, CISA SaysThe access-control platform embeds Apache ActiveMQ's OpenWire port on the network by default, the same class of bug (CVE-2023-46604) that CISA has tied to ransomware.Oct 1
188Attackers Probed Zimbra's SNMP Flaw Eight Days After Its PatchMicrosoft's Sept. 30 write-up of CVE-2026-73570 dates the first reconnaissance to July 28, then traces web shells, root escalation and mailbox theft on unpatched servers.Oct 1
189Debian Takes rsync 3.5.0 Whole Instead of Backporting 33 CVE FixesThe Aug. 13 release closes one critical proxy-protocol bypass and a run of high-rated symlink bugs, and it changes how rsync follows symlinks on backup jobs.Oct 1
190NetScaler Exploitation Warnings Preceded Citrix's CVE-2026-88771 Disclosure by a DayCitrix disclosed eight NetScaler flaws on Sept. 27, two of them rated 9.5 and already exploited, and a LevelBlue analysis shows what attackers leave behind.Oct 1
191Cisco SD-WAN Manager Flaw Hands Unauthenticated Callers the Admin APICisco confirmed exploitation of CVE-2026-76504, rated 9.8, in the advisory it published Sept. 30 with fixed releases for six software trains and no workaround.Oct 1
192Microsoft Titan Accepted Unsigned Tokens, and a 16-Year-Old Got AdminThe 17.3 trillion row figure is a metadata estimate; the records Faav says he confirmed reading number in the tens of thousands.Sep 30
193JFrog Artifactory: Two Bugs, Two Requests, Admin Access, Now All Three on CISA ListWiz saw the chain used from August 15; CISA listed the newest bug first and the two older ones nine days later.Sep 30
194CISA Lists LiteLLM and Kestra Flaws, but Microsoft Saw Different CVEsThe LiteLLM bug on the exploited list (fixed in 1.84.0) is not the one in Microsoft’s incident report, and published scores for it disagree.Sep 30
195CISA Adds Cisco FMC, Citrix NetScaler and FortiOS Flaws to Exploited ListThe 10.0 is the clearest case; the Citrix 9.3 depends on configuration; the Fortinet 7.3 understates an active RAT campaign.Sep 30
196PS5 Relapse Exploit Covers Firmware 7.00 to 13.60, Stops at the September 16 UpdateA public browser-to-kernel chain with no CVE on file runs on consoles up to 13.60 and has to be reloaded after every reboot. Sony has not said anything in the coverage we read.Sep 30
197CISA's Three Linux Kernel KEV Entries Carry Scores From 7.5 to 9.8, Depending on Who Rates ThemCVE-2026-53266 needs specific bridge rules and local access. CVE-2025-39682 is rated 9.8 by one outlet and Medium by another. The federal deadline was September 21.Sep 30
198Apple's CoreGraphics Zero-Day CVE-2026-86950 Hit Pre-iOS 27 Devices, and Three Outlets Count It DifferentlyMeta's security team reported the out-of-bounds write. CISA listed it the day after Apple's September 28 fixes, while press counts of Apple's 2026 zero-days range from two to seven.Sep 30
199Zyxel GS1900 Switches Were Hit 62 Days After the Patch, 996 Confirmed CompromisedGreyNoise says an attacker exploited CVE-2026-7273 from August 17 and pulled configs and hashed root credentials; 564 victims used factory defaults.Sep 29
200OnePlus 15 Root Chain Needs No Permissions, and OnePlus Threatened Legal Action Over ItRasmus Moorats published a two-bug chain from an unprivileged app to a root shell on September 24. OnePlus says a fix merged in July.Sep 29
201Chrome Bug Fixed in Chromium Was Used Against NGOs Before Chrome Shipped ItVolexity says two Chinese groups chained CVE-2026-85046, CVE-2026-87491 and a Windows kernel bug from September 1, before Chrome 153 carried the fix.Sep 29
202SharePoint CVE-2026-65660 Was Patched as Spoofing, Then Exploited as Code ExecutionMicrosoft's August fix carried a 6.5 rating; by Sept. 25 CISA had it in the exploited catalog at 8.8, with a three-day deadline.Sep 29
203SalesBleed: A Web Form Lead Could Steer Salesforce Agentforce Into Leaking CRM DataZenity Labs reported three flaws on June 1; Salesforce's fix dates differ between the researcher's account and press coverage.Sep 29
204ShinyHunters Beat PeopleSoft WAF Rules by Encoding One Letter in the URLMandiant says UNC6240 is back on CVE-2026-35273 with a request path that string-matching firewalls miss, and the only real fix is Oracle's June 10 patch.Sep 29
205Citrix Patches Eight NetScaler Flaws, Two Exploited for Remote Code ExecutionCVE-2026-88771 and CVE-2026-88772 are both rated 9.5, and a researcher warning preceded Citrix's own bulletin by a day.Sep 29
206Microsoft's Record 966-Fix Patch Tuesday Has Two Exploited Bugs, Both LocalThe count differs by outlet, but the operational risk sits in 20 wormable remote code execution flaws.Sep 28
207F5 BIG-IP APM Zero-Day CVE-2026-94127 Was Exploited Before Its HotfixOnly APM servers running an OAuth profile as an Authorization Server are exposed, but F5 says attackers already found them.Sep 28
208Check Point Patches Two 9.8-Rated Flaws Under Attack, One Since July 23Gateway bug CVE-2026-85102 was exploited three days after its fix; the management bug CVE-2026-93616 had no fix for 61 days.Sep 28
209Siemens' Edge Platform Still Carried a Keycloak Bug Fixed in AugustCISA published the advisory on Sept. 22, more than a month after Red Hat shipped the upstream fix, because four Siemens Industrial Edge Management products bundle the identity server.Sep 28
210LuaRocks Patches a Bytecode Flaw Attackers Used for Six WeeksAn independent researcher's writeup, published a day after the fix, names the LuaJIT instruction that let a crafted package listing read and write server memory.Sep 28