CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Developing
Exploited only
35 articles · 22 Jan – 15 Oct

Thu 15 Oct· 2 articles

  1. CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four newly observed vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The list comprises CVE-2026-0322 (Palo Alto Networks PAN-OS code injection), CVE-2026-76519…

    Security AffairsCVE-2026-0322CVE-2026-0322Exploited

  2. Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access

    Cisco has disclosed a critical flaw in its Secure Email Gateway that threat actors have been actively exploiting, tracked as CVE-2026-76519 with a CVSS of 9.8. The vulnerability resides in the Advanced Malware Protection (AMP) feature and stems from improper…

    Security AffairsCVE-2026-76519CVE-2026-76519Exploited

Thu 1 Oct· 1 article

  1. CISA Flags Actively Exploited Cisco SD-WAN Authentication Flaw

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Cisco Catalyst SD-WAN Manager’s flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is tracked as CVE-2026-76504 and carries a CVSS score of 9.8. It affects…

    Security AffairsCVE-2026-76504CVE-2026-76504Exploited

Thu 17 Sep· 1 article

  1. CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws

    The US Cybersecurity and Infrastructure Security Agency (CISA) added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. They are CVE-2026-76460 in Cisco Identity Services Engine (ISE), rated CVSS 10.0;…

    Security AffairsCVE-2026-76460CVE-2026-76460Exploited

Tue 15 Sep· 2 articles

  1. Cisco Secure Email Gateway2 articles this day · Security Affairs first

    CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks · Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero Day

    1 outletCVE-2026-76461CVE-2026-76461Exploited

Fri 11 Sep· 1 article

  1. Cisco Firewall Flaws Exploited to Deploy Qilin Ransomware

    Three threat groups are exploiting two recently patched Cisco Secure Firewall Management Center (FMC) flaws to steal credentials, gain root access, and deploy Qilin ransomware. Cisco Talos attributes three distinct post‑compromise activity clusters to…

    Security AffairsCVE-2026-20079CVE-2026-20079Exploited

Thu 10 Sep· 1 article

  1. CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws from Cisco, Google Chromium V8, Fortinet and Citrix NetScaler to its Known Exploited Vulnerabilities (KEV) catalog. The entries are CVE-2025-25249 (Fortinet multiple…

    Security AffairsCVE-2025-25249CVE-2025-25249Exploited

Thu 3 Sep· 1 article

  1. Cisco Patches Critical Root RCE Flaw in Silicon One Switches

    Cisco has patched a critical remote code execution flaw in the Nexus 9000 series switches that use Silicon One hardware. The vulnerability, tracked as CVE-2026-20212, allows an unauthenticated attacker to run code with root privileges, with a CVSS score of…

    Security AffairsCVE-2026-20212CVE-2026-20212

Thu 13 Aug· 1 article

  1. CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewall

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to Metabase, Windows, and Cisco Secure Firewall to its Known Exploited Vulnerabilities catalog. The vulnerabilities include: 1. **CVE-2026-20349**: A heap…

    Security AffairsCVE-2026-20349CVE-2026-20349Exploited

Tue 11 Aug· 1 article

  1. Cisco Warns of Critical ClamAV Flaws Affecting Secure Endpoint

    Cisco has issued a warning regarding seven vulnerabilities in ClamAV that affect its Secure Endpoint Connector across Windows, macOS, and Linux. Two of these vulnerabilities have public proof-of-concept (PoC) exploits that could allow unauthenticated…

    Security AffairsCVE-2026-20337CVE-2026-20337

Thu 30 Jul· 1 article

  1. CISA warns attackers exploit Cisco firewall flaw CVE-2026-20316

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability in Cisco Secure Firewall Management Center (FMC) Software, identified as CVE-2026-20316 with a CVSS score of 5.3, to its Known Exploited Vulnerabilities catalog. This…

    Security AffairsCVE-2026-20316CVE-2026-20316Exploited

Mon 13 Jul· 1 article

  1. CISA Adds Cisco IOS CSRF Flaw CVE-2008-4128 to Exploit Catalog

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Cisco IOS flaw, identified as CVE-2008-4128, to its Known Exploited Vulnerabilities catalog. This vulnerability affects Cisco IOS 12.4 on Cisco 871 Integrated Services Routers,…

    Security AffairsCVE-2008-4128CVE-2008-4128Exploited

Fri 26 Jun· 1 article

  1. CISA adds critical PTC Windchill, Cisco UC flaws to KEV list

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-12569, a critical remote code execution vulnerability in PTC Windchill and FlexPLM with…

    Security AffairsCVE-2026-12569CVE-2026-12569Exploited

Thu 25 Jun· 1 article

  1. Cisco Catalyst SDWAN zero day exploited months before fix

    A zero-day vulnerability in Cisco Catalyst SD-WAN, identified as CVE-2026-20245, was exploited by hackers months before its public disclosure, allowing privileged command execution. Mandiant reported that an attacker with netadmin privileges could execute…

    Security AffairsCVE-2026-20245CVE-2026-20245Exploited

Wed 24 Jun· 1 article

  1. Cisco CUCM CVE-2026-20230 SSRF flaw lets attackers gain root

    The article discusses a critical vulnerability in Cisco Unified Communications Manager (CVE-2026-20230), which is being actively exploited. The flaw, with a CVSS score of 8.6, allows unauthenticated remote attackers to carry out server-side request forgery…

    Security AffairsCVE-2026-20230CVE-2026-20230Exploited

Thu 18 Jun· 1 article

  1. Cisco patches critical ISE flaw letting admins gain root access

    Cisco has fixed a critical vulnerability, tracked as CVE-2026-20181, in its Identity Services Engine (ISE), which allows authenticated administrators to execute commands and gain root access due to improper user input validation. The vulnerability has a CVSS…

    Security AffairsCVE-2026-20181CVE-2026-20181

Tue 16 Jun· 2 articles

  1. Cisco Catalyst SD-WAN Manager2 articles this day · Security Affairs first

    Cisco SD WAN manager flaw lets attackers write files, patch urged · CISA Flags Cisco SD WAN and LiteSpeed Plugins Under Active Attack

    1 outletCVE-2026-20262CVE-2026-20262Exploited

Wed 10 Jun· 1 article

  1. CISA flags Arista, Chrome, Cisco flaws; patch by June 23

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These include: 1. **CVE-2026-7473**: A flaw in the Arista Extensible Operating System which may…

    Security AffairsCVE-2026-7473CVE-2026-7473Exploited

Fri 5 Jun· 1 article

  1. Cisco SD-WAN Has a New Root-Level Problem, and There’s No Fix Yet

    Cisco has identified a significant privilege escalation vulnerability, tracked as CVE-2026-20245, in its Catalyst SD-WAN Manager. This flaw allows authenticated local attackers to execute arbitrary commands as the root user through file upload command…

    Security AffairsCVE-2026-20245CVE-2026-20245Exploited

Thu 4 Jun· 1 article

  1. Cisco Fixes CVE-2026-20230 SSRF Flaw in Unified CM, Root Risk.

    Cisco has patched a critical vulnerability in its Unified CM system, tracked as CVE-2026-20230, which allows unauthenticated attackers to execute server-side request forgery (SSRF) attacks. The flaw arises from improper validation of HTTP requests and…

    Security AffairsCVE-2026-20230CVE-2026-20230Exploited

Thu 21 May· 1 article

  1. Cisco fixed maximum severity flaw CVE-2026-20223 in Secure Workload

    Cisco has addressed a critical vulnerability (CVE-2026-20223) in its Secure Workload platform that could allow attackers to gain Site Admin privileges via crafted API requests. The flaw, with a CVSS score of 10.0, is due to insufficient validation and…

    Security AffairsCVE-2026-20223CVE-2026-20223

Thu 14 May· 1 article

  1. U.S. CISA adds a flaw in Cisco Catalyst SD-WAN to its Known Exploited Vulnerabilities catalog

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a flaw in Cisco Catalyst SD-WAN to its Known Exploited Vulnerabilities catalog. The vulnerability, tracked as CVE-2026-20182, carries a CVSS score of 10.0 and affects the SD-WAN…

    Security AffairsCVE-2026-20182CVE-2026-20182Exploited

Thu 7 May· 1 article

  1. Cisco patches Unity Connection flaws tracked as CVE-2026-20034/35

    Cisco has released patches for several high-severity vulnerabilities in its enterprise products, including two in Unity Connection that could enable code execution or service disruption. The flaws, CVE-2026-20034 and CVE-2026-20035, could allow a remote…

    Security AffairsCVE-2026-20034CVE-2026-20034

Sat 25 Apr· 1 article

  1. FIRESTARTER backdoor persists on patched Cisco ASA devices

    CISA said a U.S. federal civilian agency’s Cisco Firepower ASA device running ASA software was compromised in September 2025 by the FIRESTARTER backdoor, and that the malware persisted even after security patches were applied. The agency, together with the…

    Security AffairsCVE-2025-20333CVE-2025-20333Exploited

Tue 21 Apr· 1 article

  1. CISA adds weaponised PaperCut, TeamCity flaws to KEV catalog

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Cisco Catalyst, Kentico Xperience, PaperCut NG/MF, Synacor ZCS, Quest KACE SMA, and JetBrains TeamCity flaws to its Known Exploited Vulnerabilities (KEV) catalog, listing eight CVEs…

    Security AffairsCVE-2026-20133CVE-2026-20133Exploited

Thu 2 Apr· 1 article

  1. Cisco fixed critical and high-severity flaws

    Cisco has released patches for two critical and six high-severity vulnerabilities, which could allow attackers to bypass authentication, run code, escalate privileges, and access sensitive data. One of the critical flaws, CVE-2026-20093 with a CVSS score of…

    Security AffairsCVE-2026-20093CVE-2026-20093Exploited

Thu 19 Mar· 2 articles

  1. Cisco Secure Firewall Management Center (FMC)2 articles this day · Security Affairs first

    U.S. CISA adds a flaw in Cisco FMC and Cisco SCC Firewall Management to its Known Exploited Vulnerabilities catalog · Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure

    1 outletCVE-2026-20131CVE-2026-20131Exploited

Fri 6 Mar· 1 article

  1. Cisco warns SDWAN flaws CVE-2026-20128 CVE-2026-20122

    Cisco warns that two recently patched Catalyst SD-WAN flaws, CVE-2026-20128 and CVE-2026-20122, are already being actively exploited in the wild. According to CISCO, multiple vulnerabilities in Cisco Catalyst SD-WAN Manager could allow an attacker to access…

    Security AffairsCVE-2026-20128CVE-2026-20128Exploited

Wed 4 Mar· 1 article

  1. Cisco FMC CVE-2026-20079 and CVE-2026-20131 grant root access

    Cisco has patched two maximum-severity vulnerabilities in its Secure Firewall Management Center (FMC) that could allow attackers to gain root access to managed firewalls. The issues are CVE-2026-20079, a authentication bypass with a CVSS score of 10.0, and…

    Security AffairsCVE-2026-20079CVE-2026-20079Exploited

Thu 26 Feb· 2 articles

  1. CISA: CVE-2026-20127 lets attackers gain admin on Cisco SD WAN

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog, identified as CVE-2022-20775 and CVE-2026-20127. The latter carries a CVSS score of 10.0 and affects the Cisco…

    Security AffairsCVE-2022-20775CVE-2022-20775Exploited

  2. CVE-2026-20127: Critical Cisco SD WAN flaw gives root access

    Cisco has disclosed a critical SD-WAN vulnerability, tracked as CVE-2026-20127 with a CVSS of 10.0, which has been exploited since 2023 to grant unauthenticated attackers full administrative access to Catalyst SD-WAN Controller and Manager by sending crafted…

    Security AffairsCVE-2026-20127CVE-2026-20127Exploited

Thu 22 Jan· 1 article

  1. U.S. CISA adds a flaw in Cisco Unified Communications products to its Known Exploited Vulnerabilities catalog

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Cisco Unified Communications vulnerability, tracked as CVE-2026-20045 with a CVSS score of 8.2, to its Known Exploited Vulnerabilities catalog. Cisco patched a critical zero‑day…

    Security AffairsCVE-2026-20045CVE-2026-20045Exploited

No older articles match these filters.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device