CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Developing
Exploited only
43 articles · 22 Sep – 23 Oct

Fri 23 Oct· 2 articles

  1. CISA Flags Actively Exploited Nextcloud Code Injection Flaw

    CISA added CVE-2026-110447 to its Known Exploited Vulnerabilities (KEV) catalogue on 23 October 2026. The flaw affects Collabora Online – Built-in CODE Server when used within the Nextcloud platform and can allow remote code execution through OS command…

    CISACVE-2026-110447CVE-2026-110447Exploited

  2. CISA Confirms Active Attacks on Arista VeloCloud Orchestrator

    CISA added CVE-2026-114625, the Arista VeloCloud Orchestrator SQL Injection Vulnerability, to its Known Exploited Vulnerabilities (KEV) catalogue on 23 October 2026. The flaw affects on-premises Arista VeloCloud Orchestrator and may let a remote attacker…

    CISACVE-2026-114625CVE-2026-114625Exploited

Tue 20 Oct· 6 articles

  1. CISA Flags Actively Exploited Siemens Software Center Flaw

    CISA added CVE-2026-110936 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Siemens Software Center and is an uncontrolled search path element flaw that could let an authenticated local attacker execute…

    CISACVE-2026-110936CVE-2026-110936Exploited

  2. CISA Flags Actively Exploited Plex Server SSRF Flaw

    CISA added CVE-2026-96652 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Plex Media Server and is a server-side request forgery (SSRF) flaw that can make the server send a POST request to a destination…

    CISACVE-2026-96652CVE-2026-96652Exploited

  3. CISA Flags Actively Exploited Plex Media Server Flaw for Patching

    CISA added CVE-2026-96654 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The flaw affects Plex Media Server and could let an attacker call functions belonging to other plugins and supply their own parameters. The vulnerability,…

    CISACVE-2026-96654CVE-2026-96654Exploited

  4. CISA Flags Exploited Plex Flaw That Can Reach Internal Systems

    CISA added CVE-2026-96655 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Plex Media Server and is a server-side request forgery (SSRF) flaw that could let an authenticated user make the server request…

    CISACVE-2026-96655CVE-2026-96655Exploited

  5. CISA Confirms Active Exploitation of Plex Media Server Flaw

    CISA added CVE-2026-96656 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Plex Media Server and is an external control of file name or path flaw that can let an admin user write arbitrary files that may…

    CISACVE-2026-96656CVE-2026-96656Exploited

  6. CISA Flags Exploited SiteGuard Flaw That Could Give Attackers System Control

    CISA added CVE-2026-106931 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects EG Secure Solutions SiteGuard Server Edition and is an OS command injection flaw that may let an attacker run arbitrary operating…

    CISACVE-2026-106931CVE-2026-106931Exploited

Fri 16 Oct· 2 articles

  1. CISA Flags Fortinet Path Traversal Flaw Under Active Exploitation

    CISA added CVE-2025-61624 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 October 2026. The vulnerability affects Fortinet FortiOS, FortiPAM, FortiProxy and FortiSwitchManager, and may let an authenticated administrator with at least read-write…

    CISACVE-2025-61624CVE-2025-61624Exploited

  2. CISA Warns of Exploited BeyondTrust Remote Support Auth Bypass

    CISA added CVE-2026-102764 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 October 2026. The flaw affects BeyondTrust Remote Support and is an authentication bypass by spoofing that could let a remote attacker perform file operations on the…

    CISACVE-2026-102764CVE-2026-102764Exploited

Thu 15 Oct· 1 article

  1. CISA Flags Critical Atlassian Flaw Letting Attackers Access Files

    CISA added CVE-2026-21589 to its Known Exploited Vulnerabilities (KEV) catalogue on 15 October 2026. The flaw affects multiple Atlassian products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software…

    CISACVE-2026-21589CVE-2026-21589Exploited

Wed 14 Oct· 5 articles

  1. CISA Flags Actively Exploited PAN-OS Flaw That Grants Root Access

    CISA added CVE-2026-0322 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The vulnerability affects Palo Alto Networks PAN-OS and could let an authenticated attacker with network access execute arbitrary code as root on a firewall.…

    CISACVE-2026-0322CVE-2026-0322Exploited

  2. CISA Warns of Attacks Exploiting AhsayCBS Authentication Flaw

    CISA added CVE-2026-105133 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The Ahsay AhsayCBS Improper Authentication Vulnerability affects AhsayCBS and could let a remote attacker bypass authentication by manipulating a parameter…

    CISACVE-2026-105133CVE-2026-105133Exploited

  3. CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score

    CISA added CVE-2026-76519 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The Cisco Secure Email Gateway Relative Path Traversal Vulnerability affects Cisco Secure Email Gateway and could let an unauthenticated remote attacker…

    CISACVE-2026-76519CVE-2026-76519Exploited

  4. CISA Warns of Active Attacks on Critical AhsayCBS Flaw

    CISA added CVE-2026-105134 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The flaw affects Ahsay AhsayCBS and is a command injection vulnerability that could let a remote attacker execute operating system commands. The…

    CISACVE-2026-105134CVE-2026-105134Exploited

  5. CISA flags actively exploited Windows flaw with 16 October patch deadline

    CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities (KEV) catalogue on 13 October 2026. The vulnerability affects Microsoft Windows and is a command injection flaw in Windows Shell that allows an unauthorised attacker to bypass a security…

    CISACVE-2026-96951CVE-2026-96951Exploited

Tue 13 Oct· 1 article

  1. CISA Warns Ivanti VPN Flaw Enables Unauthenticated Command Execution

    CISA added CVE-2026-104935 to its Known Exploited Vulnerabilities (KEV) catalogue on 13 October 2026. The entry affects Ivanti Connect Secure and describes an authentication bypass by spoofing that lets a remote, unauthenticated attacker execute arbitrary…

    CISACVE-2026-104935CVE-2026-104935Exploited

Thu 8 Oct· 5 articles

  1. CISA Flags Actively Exploited ProFTPD Flaw That Exposes Files

    CISA added CVE-2015-3306, the ProFTPD Improper Access Control Vulnerability, to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects ProFTPD and could let remote attackers read and write arbitrary files using the…

    CISACVE-2015-3306CVE-2015-3306Exploited

  2. CISA Flags Actively Exploited ONLYOFFICE Flaw That Could Enable Remote Code Execution

    CISA added CVE-2021-3199 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects ONLYOFFICE Docs and is a path traversal flaw in ONLYOFFICE Docs Server that could allow remote code execution. The flaw can occur…

    CISACVE-2021-3199CVE-2021-3199Exploited

  3. CISA Confirms Exploitation of Strapi Flaw Exposing User Data

    CISA added CVE-2023-22894 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects Strapi and is named the Strapi Cleartext Storage of Sensitive Information Vulnerability; it could expose sensitive user details to…

    CISACVE-2023-22894CVE-2023-22894Exploited

  4. CISA Flags Actively Exploited Apache Struts Flaw for Urgent Patching

    CISA added CVE-2016-3081 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects Apache Struts and could let a remote attacker execute arbitrary code when Dynamic Method Invocation is enabled. Apache describes…

    CISACVE-2016-3081CVE-2016-3081Exploited

  5. CISA Flags Exploited BIND Flaw That Can Take DNS Servers Offline

    CISA added CVE-2015-5477 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects ISC BIND and is a data processing error that could let remote attackers cause a denial of service by sending TKEY queries. The flaw…

    CISACVE-2015-5477CVE-2015-5477Exploited

Sun 4 Oct· 2 articles

  1. NetScaler ADC2 articles this day · CISA first

    CISA Warns of Active Exploitation in Citrix NetScaler Flaw · CISA Warns of Active Exploitation Targeting Citrix NetScaler Flaw

    1 outletCVE-2026-88779CVE-2026-88779Exploited

Fri 2 Oct· 2 articles

  1. CISA Flags Actively Exploited Zammad Flaw Enabling Remote Code Execution

    CISA has added CVE-2026-102489 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Zammad GmbH’s Zammad customer support platform and is known as the Zammad Session Fixation Vulnerability. It can lead to remote code execution as…

    CISACVE-2026-102489CVE-2026-102489Exploited

  2. CISA Warns of Actively Exploited Zammad Flaw Enabling Root Access

    CISA has added CVE-2026-102490 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Zammad GmbH’s Zammad product and is identified as the “Zammad GmbH Zammad Improper Privilege Management Vulnerability”. It allows the local…

    CISACVE-2026-102490CVE-2026-102490Exploited

Thu 1 Oct· 1 article

  1. CISA Flags Fortinet FortiMail Flaw Under Active Exploitation

    CISA added CVE-2026-104286 to its Known Exploited Vulnerabilities (KEV) catalogue on 1 October 2026. The vulnerability affects Fortinet FortiMail and is named the Fortinet FortiMail Path Traversal Vulnerability. It allows an unauthenticated attacker to write…

    CISACVE-2026-104286CVE-2026-104286Exploited

Wed 30 Sep· 1 article

  1. CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw

    CISA added CVE-2026-76504 to its Known Exploited Vulnerabilities (KEV) catalogue on 30 September 2026. The vulnerability affects Cisco Catalyst SD-WAN Manager and is known as the Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability. It could allow an…

    CISACVE-2026-76504CVE-2026-76504Exploited

Tue 29 Sep· 1 article

  1. CISA Warns of Actively Exploited Apple CoreGraphics Flaw

    CISA added CVE-2026-86950 to its Known Exploited Vulnerabilities (KEV) catalogue on 29 September 2026. The vulnerability affects Apple’s iOS, macOS and iPadOS products. Known as the Apple Multiple Products Out-of-Bounds Write Vulnerability, it affects…

    CISACVE-2026-86950CVE-2026-86950Exploited

Sun 27 Sep· 4 articles

  1. Citrix NetScaler ADC3 articles this day · CISA first

    CISA Warns NetScaler Flaw Is Being Exploited for Command Execution · CISA Flags Actively Exploited Citrix NetScaler Flaws for Urgent Action

    1 outletCVE-2026-88771CVE-2026-88771Exploited

  2. CISA Warns Attackers Are Exploiting Critical Citrix NetScaler Flaw

    CISA has added CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Citrix NetScaler ADC and NetScaler Gateway and is an improper restriction of operations within the bounds of a memory buffer that could permit…

    CISACVE-2026-88772CVE-2026-88772Exploited

Fri 25 Sep· 4 articles

  1. CISA Warns of Actively Exploited WordPress Flaw Enabling Code Execution

    CISA added CVE-2026-87902 to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026. The vulnerability affects WordPress Core and is known as the WordPress Core Remote File Inclusion Vulnerability. It allows an unauthenticated attacker to…

    CISACVE-2026-87902CVE-2026-87902Exploited

  2. Microsoft SharePoint Enterprise Server 20162 articles this day · CISA first

    CISA Warns of Actively Exploited Microsoft SharePoint Code Flaw · CISA Flags Actively Exploited SharePoint and MikroTik Flaws

    1 outletCVE-2026-65660CVE-2026-65660Exploited

  3. Actively Exploited MikroTik RouterOS Flaw Enables Unauthenticated Attacks

    CISA added CVE-2026-67279 to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026. The vulnerability affects MikroTik RouterOS and is known as the “Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability”. It allows an…

    CISACVE-2026-67279CVE-2026-67279Exploited

Thu 24 Sep· 2 articles

  1. CISA Flags Actively Exploited Critical Flaw in Adobe Commerce

    CISA has added CVE-2026-71362 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Adobe Commerce and Magento and is an incorrect authorisation flaw that can allow attackers to access sensitive resources with elevated privileges…

    CISACVE-2026-71362CVE-2026-71362Exploited

  2. CISA Warns of Active Exploits Targeting Critical WSO2 Flaw

    CISA added CVE-2026-5430 to its Known Exploited Vulnerabilities (KEV) catalogue on 24 September 2026. The vulnerability affects WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway. Known as the WSO2 Multiple Products Path Traversal…

    CISACVE-2026-5430CVE-2026-5430Exploited

Tue 22 Sep· 4 articles

  1. CISA Warns of Active Check Point Gateway Code Execution Flaw

    CISA added CVE-2026-85102 to its Known Exploited Vulnerabilities (KEV) catalogue on 22 September 2026. The vulnerability affects Check Point Security Gateway and Check Point Spark Firewall products using Site to Site VPN or Remote Access VPN. Check Point…

    CISACVE-2026-85102CVE-2026-85102Exploited

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device