CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Developing
Exploited only
40 articles · 14 Sep – 8 Oct

Latest days

Thu 8 Oct· 5 articles

  1. CISA Flags Actively Exploited ProFTPD Flaw That Exposes Files

    CISA added CVE-2015-3306, the ProFTPD Improper Access Control Vulnerability, to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects ProFTPD and could let remote attackers read and write arbitrary files using the…

    CISACVE-2015-3306CVE-2015-3306Exploited

  2. CISA Flags Actively Exploited ONLYOFFICE Flaw That Could Enable Remote Code Execution

    CISA added CVE-2021-3199 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects ONLYOFFICE Docs and is a path traversal flaw in ONLYOFFICE Docs Server that could allow remote code execution. The flaw can occur…

    CISACVE-2021-3199CVE-2021-3199Exploited

  3. CISA Confirms Exploitation of Strapi Flaw Exposing User Data

    CISA added CVE-2023-22894 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects Strapi and is named the Strapi Cleartext Storage of Sensitive Information Vulnerability; it could expose sensitive user details to…

    CISACVE-2023-22894CVE-2023-22894Exploited

  4. CISA Flags Actively Exploited Apache Struts Flaw for Urgent Patching

    CISA added CVE-2016-3081 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects Apache Struts and could let a remote attacker execute arbitrary code when Dynamic Method Invocation is enabled. Apache describes…

    CISACVE-2016-3081CVE-2016-3081Exploited

  5. CISA Flags Exploited BIND Flaw That Can Take DNS Servers Offline

    CISA added CVE-2015-5477 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects ISC BIND and is a data processing error that could let remote attackers cause a denial of service by sending TKEY queries. The flaw…

    CISACVE-2015-5477CVE-2015-5477Exploited

Sun 4 Oct· 2 articles

  1. NetScaler ADC2 articles this day · CISA first

    CISA Warns of Active Exploitation in Citrix NetScaler Flaw · CISA Warns of Active Exploitation Targeting Citrix NetScaler Flaw

    1 outletCVE-2026-88779CVE-2026-88779Exploited

Fri 2 Oct· 2 articles

  1. CISA Flags Actively Exploited Zammad Flaw Enabling Remote Code Execution

    CISA has added CVE-2026-102489 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Zammad GmbH’s Zammad customer support platform and is known as the Zammad Session Fixation Vulnerability. It can lead to remote code execution as…

    CISACVE-2026-102489CVE-2026-102489Exploited

  2. CISA Warns of Actively Exploited Zammad Flaw Enabling Root Access

    CISA has added CVE-2026-102490 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Zammad GmbH’s Zammad product and is identified as the “Zammad GmbH Zammad Improper Privilege Management Vulnerability”. It allows the local…

    CISACVE-2026-102490CVE-2026-102490Exploited

Thu 1 Oct· 1 article

  1. CISA Flags Fortinet FortiMail Flaw Under Active Exploitation

    CISA added CVE-2026-104286 to its Known Exploited Vulnerabilities (KEV) catalogue on 1 October 2026. The vulnerability affects Fortinet FortiMail and is named the Fortinet FortiMail Path Traversal Vulnerability. It allows an unauthenticated attacker to write…

    CISACVE-2026-104286CVE-2026-104286Exploited

Wed 30 Sep· 1 article

  1. CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw

    CISA added CVE-2026-76504 to its Known Exploited Vulnerabilities (KEV) catalogue on 30 September 2026. The vulnerability affects Cisco Catalyst SD-WAN Manager and is known as the Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability. It could allow an…

    CISACVE-2026-76504CVE-2026-76504Exploited

Tue 29 Sep· 1 article

  1. CISA Warns of Actively Exploited Apple CoreGraphics Flaw

    CISA added CVE-2026-86950 to its Known Exploited Vulnerabilities (KEV) catalogue on 29 September 2026. The vulnerability affects Apple’s iOS, macOS and iPadOS products. Known as the Apple Multiple Products Out-of-Bounds Write Vulnerability, it affects…

    CISACVE-2026-86950CVE-2026-86950Exploited

Sun 27 Sep· 4 articles

  1. Citrix NetScaler ADC3 articles this day · CISA first

    CISA Warns NetScaler Flaw Is Being Exploited for Command Execution · CISA Flags Actively Exploited Citrix NetScaler Flaws for Urgent Action

    1 outletCVE-2026-88771CVE-2026-88771Exploited

  2. CISA Warns Attackers Are Exploiting Critical Citrix NetScaler Flaw

    CISA has added CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Citrix NetScaler ADC and NetScaler Gateway and is an improper restriction of operations within the bounds of a memory buffer that could permit…

    CISACVE-2026-88772CVE-2026-88772Exploited

Fri 25 Sep· 4 articles

  1. CISA Warns of Actively Exploited WordPress Flaw Enabling Code Execution

    CISA added CVE-2026-87902 to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026. The vulnerability affects WordPress Core and is known as the WordPress Core Remote File Inclusion Vulnerability. It allows an unauthenticated attacker to…

    CISACVE-2026-87902CVE-2026-87902Exploited

  2. Microsoft SharePoint Enterprise Server 20162 articles this day · CISA first

    CISA Warns of Actively Exploited Microsoft SharePoint Code Flaw · CISA Flags Actively Exploited SharePoint and MikroTik Flaws

    1 outletCVE-2026-65660CVE-2026-65660Exploited

  3. Actively Exploited MikroTik RouterOS Flaw Enables Unauthenticated Attacks

    CISA added CVE-2026-67279 to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026. The vulnerability affects MikroTik RouterOS and is known as the “Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability”. It allows an…

    CISACVE-2026-67279CVE-2026-67279Exploited

Thu 24 Sep· 4 articles

  1. CISA Flags Actively Exploited Critical Flaw in Adobe Commerce

    CISA has added CVE-2026-71362 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Adobe Commerce and Magento and is an incorrect authorisation flaw that can allow attackers to access sensitive resources with elevated privileges…

    CISACVE-2026-71362CVE-2026-71362Exploited

  2. CISA Warns of Active Exploits Targeting Critical WSO2 Flaw

    CISA added CVE-2026-5430 to its Known Exploited Vulnerabilities (KEV) catalogue on 24 September 2026. The vulnerability affects WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway. Known as the WSO2 Multiple Products Path Traversal…

    CISACVE-2026-5430CVE-2026-5430Exploited

  3. CISA Warns Robot Vacuums Could Enable Arbitrary Code Execution

    The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that Eufy Omni C20 and Omni X10 Pro robot vacuum cleaners running versions earlier than 1.6.4 are affected by vulnerabilities that could enable system-level command execution or…

    CISACVE-2026-93289CVE-2026-93289

  4. CISA Warns Botslab Dashcams Could Leak Data and Run Rogue Firmware

    CISA has warned that two firmware versions of Botslab’s G980H dashcam series are affected by 13 vulnerabilities. The affected versions are `30010_QHG980HN5294SysFW+` and `58_QHG980HMCN5291SysFW+`, although CVE-2026-88956 affects only the latter and…

    CISACVE-2026-88956CVE-2026-88956

Tue 22 Sep· 5 articles

  1. CISA Warns of Active Check Point Gateway Code Execution Flaw

    CISA added CVE-2026-85102 to its Known Exploited Vulnerabilities (KEV) catalogue on 22 September 2026. The vulnerability affects Check Point Security Gateway and Check Point Spark Firewall products using Site to Site VPN or Remote Access VPN. Check Point…

    CISACVE-2026-85102CVE-2026-85102Exploited

  2. CISA Warns of Active Attacks on Critical Check Point Flaw

    CISA added CVE-2026-93616 to its Known Exploited Vulnerabilities (KEV) catalogue on 22 September 2026. The vulnerability affects multiple Check Point products, including Security Management Server, Multi-Domain Security Management Server, Log Server,…

    CISACVE-2026-93616CVE-2026-93616Exploited

  3. CISA Warns of Active Attacks Exploiting Critical F5 BIG-IP Flaw

    CISA added CVE-2026-94127 to its Known Exploited Vulnerabilities (KEV) catalogue on 22 September 2026. The vulnerability affects F5 BIG-IP APM and is a heap-based buffer overflow that can enable unauthenticated remote code execution when an access policy and…

    CISACVE-2026-94127CVE-2026-94127Exploited

  4. CISA Warns of Active Attacks on Critical VeloCloud Flaw

    CISA added CVE-2026-93952 to its Known Exploited Vulnerabilities (KEV) catalogue on 22 September 2026. The vulnerability affects Arista VeloCloud Orchestrator (VCO) on-prem and is an improper input validation flaw that may expose privileged internal…

    CISACVE-2026-93952CVE-2026-93952Exploited

  5. CISA Warns of Critical Siemens Industrial Edge Account Takeover Flaw

    CISA has warned of a critical authentication bypass in Siemens Industrial Edge Management that could enable an unauthenticated remote attacker to take over user accounts. Tracked as CVE-2026-18963, the flaw affects the reset-credentials process in the…

    CISACVE-2026-18963CVE-2026-18963

Mon 21 Sep· 1 article

  1. CISA Warns of Active Zyxel Switch Attacks via Command Flaw

    CISA has added CVE-2026-7273 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Zyxel GS1900 Series Switches and is a stack-based buffer overflow in the devices’ CGI programme that may allow command execution. An…

    CISACVE-2026-7273CVE-2026-7273Exploited

Fri 18 Sep· 4 articles

  1. CISA Warns of Actively Exploited Critical Linux Kernel Flaw

    CISA has added CVE-2025-39682 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Linux Kernel and is described as an improper check for unusual or exceptional conditions in the TLS receive path. It can allow a zero-length…

    CISACVE-2025-39682CVE-2025-39682Exploited

  2. CISA Warns of Actively Exploited Linux Kernel Memory Flaw

    CISA has added CVE-2026-53266 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Linux Kernel and is an out-of-bounds write in the ebtables SNAT target, which can rewrite an ARP sender hardware address directly into a nonlinear…

    CISACVE-2026-53266CVE-2026-53266Exploited

  3. Linux Kernel2 articles this day · CISA first

    CISA Flags Actively Exploited Linux Kernel Race Condition · CISA Flags Two Linux Kernel Flaws Under Active Exploitation

    1 outletCVE-2025-39964CVE-2025-39964Exploited

Thu 17 Sep· 1 article

  1. CISA Flags Exploited Acronis Backup Flaw Allowing Privilege Escalation

    CISA has added CVE-2026-87886 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Acronis Backup, specifically the plugin for cPanel & WHM and the extension for Plesk. Named the Acronis Backup Incorrect Default Permissions…

    CISACVE-2026-87886CVE-2026-87886Exploited

Wed 16 Sep· 3 articles

  1. Attackers Exploit Cisco ISE Flaw to Bypass Management Interface

    CISA added CVE-2026-76460 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. The vulnerability affects Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). Cisco names it the Identity Services…

    CISACVE-2026-76460CVE-2026-76460Exploited

  2. Google Android2 articles this day · CISA first

    Actively Exploited Pixel Modem Flaw Bypasses Permission Checks · CISA Warns of Active Exploitation in Google Pixel Vulnerability

    1 outletCVE-2026-58704CVE-2026-58704Exploited

Tue 15 Sep· 1 article

  1. Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers

    The document titled "Protecting Tokens and Assertions from Forgery, Theft, and Misuse" provides guidelines developed by the National Institute of Standards and Technology (NIST) and the Cybersecurity & Infrastructure Security Agency (CISA) for federal…

    CISA

Mon 14 Sep· 1 article

  1. CISA Warns of Actively Exploited Cisco Email Gateway Flaw

    CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 September 2026. The vulnerability affects Cisco Secure Email Gateway and is known as the Cisco Secure Email Gateway SQL Injection Vulnerability. It could allow an…

    CISACVE-2026-76461CVE-2026-76461Exploited

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device