CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Developing
Exploited only
40 articles · 16 Jun – 22 Oct

Thu 22 Oct· 3 articles

  1. Cisco Patches 13 Snort 3 Flaws, Including Critical Code Execution Risk

    Cisco has issued a coordinated set of advisories fix­ing 13 Snort 3 vulnerabilities across its security products, including firewalls, Meraki MX, Cyber Vision and UTD on IOS XE. The most severe flaw, CVE-2026-20043, carries a CVSSv3 score of 9.0 for an…

    SecurityOnlineCVE-2026-20043CVE-2026-20043

  2. Cisco Patches Root Access Flaw in Expressway Gateways

    Cisco has issued three security advisories on 21 October 2026 addressing ten vulnerabilities across Cisco Expressway Core (Expressway-C) and Expressway Edge (Expressway-E) gateways, with the most severe being a root remote code execution flaw. The standout…

    SecurityOnlineCVE-2026-76466CVE-2026-76466

  3. Cisco fixes critical Unified CM flaws that could expose networks

    Cisco has released a security hardening update for Unified CM and related voice products, after internal testing uncovered a set of bugs that were grouped into nine CVEs. The advisories issued on 21 October 2026 flag three critical vulnerabilities (all CVSS…

    SecurityOnlineCVE-2026-76473CVE-2026-76473

Mon 19 Oct· 1 article

  1. Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin

    Between 12 and 18 October 2026, CVE Watchtower logged 5,499 new vulnerabilities, with this weekly review tracking 12 exploited flaws. Six of those were flagged by Daily Cybersecurity’s intelligence sources, and three of the exploited flaws are not yet…

    SecurityOnlineCVE-2026-102764CVE-2026-102764Exploited

Wed 14 Oct· 1 article

  1. Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys

    Cisco’s Secure Email Gateway is being exploited in the wild for CVE-2026-76519, a critical arbitrary file write vulnerability rated CVSS 3.1 v3.1 9.8. The flaw lies in the AMP File Reputation feature, specifically in how the file reputation service handles…

    SecurityOnlineCVE-2026-76519CVE-2026-76519Exploited

Thu 8 Oct· 1 article

  1. Cisco Finesse SSRF Flaw Could Expose Data, With Patches Due in 2027

    Cisco has publicly disclosed an unauthenticated server‑side request forgery (SSRF) flaw in the Finesse web interface, tracked as CVE-2026-20362. The vulnerability is rated 7.2 on CVSSv3 and is said to affect Finesse deployments regardless of device…

    SecurityOnlineCVE-2026-20362CVE-2026-20362

Wed 7 Oct· 3 articles

  1. Cisco Patches Critical Flaw That Could Break License On-Prem Security

    Cisco has issued four advisories covering 18 CVEs across its License On-Prem, APIC and Meraki portfolios, with the most severe hitting License On-Prem itself. The updates include a CVSS 10 vulnerability tied to cryptographic signature verification…

    SecurityOnlineCVE-2026-76482CVE-2026-76482

  2. Cisco fixes critical Nexus flaw that could let attackers run code as root

    Cisco has fixed a critical NX-API flaw, CVE-2026-76471, that could let an unauthenticated attacker run code as root on Cisco Nexus switches. Cisco also released an NX-OS hardening release that groups six additional vulnerabilities into separate CVEs,…

    SecurityOnlineCVE-2026-76471CVE-2026-76471

  3. Cisco Patches Critical NX-OS Flaws That Could Crash Nexus Switches

    Cisco has issued patches for four critical vulnerabilities within the OAM features of NX-OS on Nexus 3000 and 9000 series switches, each rated 9.8 on CVSSv3. The flaws could allow an unauthenticated remote attacker to run arbitrary code with root privileges…

    SecurityOnlineCVE-2026-76485CVE-2026-76485

Mon 5 Oct· 1 article

  1. Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk

    Researchers tracked 2,652 new CVEs between 28 September and 4 October 2026, with seven flaws showing confirmed exploitation. Daily Cybersecurity (DC) flagged six exploited flaws, and six appeared in CISA’s Known Exploited Vulnerabilities (KEV) catalog. Five…

    SecurityOnlineCVE-2026-104286CVE-2026-104286Exploited

Wed 30 Sep· 1 article

  1. Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin Access

    Cisco has identified and patched a critical authentication bypass in Cisco Catalyst SD-WAN Manager, tracked as CVE-2026-76504. The flaw, rated CVSS 9.8, lies in the API session-based authentication logic and stems from improper handling of URI encoding in an…

    SecurityOnlineCVE-2026-76504CVE-2026-76504Exploited

Mon 21 Sep· 1 article

  1. Cisco Warns of Actively Exploited Flaws Enabling Root Access

    Between 14 and 20 September 2026, CVE Watchtower recorded 4,378 new vulnerabilities, including 369 rated critical. Daily Cybersecurity identified 10 as exploited, while three of those were also added to CISA’s Known Exploited Vulnerabilities (KEV) catalogue.…

    SecurityOnlineCVE-2026-76460CVE-2026-76460Exploited

Thu 17 Sep· 2 articles

  1. Cisco Patches Firewall Flaws Enabling Unauthenticated Root Access

    Cisco fixed 18 vulnerabilities in its Secure Firewall product range on 16 September 2026, covering Firewall Management Center (FMC), Adaptive Security Appliance (ASA) and Threat Defense software. The group comprises eight critical and 10 high-severity flaws,…

    SecurityOnlineCVE-2026-20242CVE-2026-20242

  2. Cisco Patches Critical ISE Flaws Enabling Unauthenticated Admin Access

    Cisco issued advisories on 16 September 2026 for five critical vulnerabilities in Identity Services Engine (ISE), used to manage network access for employees, devices and visitors. The flaws affect ISE releases 3.1, 3.2, 3.3, 3.4 and 3.5, with some also…

    SecurityOnlineCVE-2026-76423CVE-2026-76423

Wed 16 Sep· 1 article

  1. Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access

    Cisco warned on 16 September 2026 that attackers are actively exploiting a critical vulnerability in its Identity Services Engine (ISE) and ISE-PIC products. Tracked as CVE-2026-76460, the flaw has a CVSS score of 10.0 and affects releases 3.1 through 3.5…

    SecurityOnlineCVE-2026-76460CVE-2026-76460Exploited

Tue 15 Sep· 2 articles

  1. Cisco Patches Actively Exploited Flaws in Secure Email Appliances

    Cisco has fixed five vulnerabilities in Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Four are rated critical with CVSS 3 scores of 9.8, while the remaining issue is high severity with a score of 7.5. The flaws affect software releases…

    SecurityOnlineCVE-2026-76440CVE-2026-76440

  2. Cisco Email Gateway Flaw Exploited to Gain Root Access via Email

    Cisco has confirmed active exploitation of a critical vulnerability in its Secure Email Gateway, tracked as CVE-2026-76461 and rated 9.8 (Critical) under CVSSv3. The flaw affects both physical and virtual appliances, regardless of configuration. It is caused…

    SecurityOnlineCVE-2026-76461CVE-2026-76461Exploited

Thu 10 Sep· 1 article

  1. UEFI Shell Flaw Threatens Secure Boot on Millions of Devices

    A vulnerability in the UEFI Shell module embedded in SPI flash memory has been disclosed that enables a Secure Boot bypass. Security researchers describe a critical flaw that could let an attacker execute unauthorised code during the early startup phase,…

    SecurityOnlineCVE-2026-33197CVE-2026-33197

Wed 9 Sep· 2 articles

  1. Cisco Warns Attackers Are Exploiting Critical FMC Flaws for Root Access

    Cisco Talos researchers say two critical flaws in Cisco Secure Firewall Management Center (FMC) are being actively exploited in the wild. The vulnerabilities are CVE-2026-20079, an authentication bypass in the FMC web interface, and CVE-2026-20316, a flaw…

    SecurityOnlineCVE-2026-20079CVE-2026-20079Exploited

  2. Cisco UCS Servers Face Secure Boot Bypass via Public Exploit

    Cisco has disclosed a high-severity vulnerability affecting its Unified Computing System (UCS) platform that enables a Secure Boot bypass via the UEFI shell. The flaw, tracked as CVE-2026-20293 with a CVSS v3 score of 7.1, could allow an authenticated user…

    SecurityOnlineCVE-2026-20293CVE-2026-20293

Thu 3 Sep· 3 articles

  1. Cisco Secure Email S/MIME Flaws Publicly Disclosed

    The content alerts about multiple active exploits detected on September 2, 2026, concerning vulnerabilities in Cisco products. Key vulnerabilities include CVE-2026-20354 and CVE-2026-20355 related to S/MIME flaws allowing decryption of sensitive email…

    SecurityOnlineCVE-2026-20354CVE-2026-20354

  2. Cisco Fixes Critical Cisco IOS XR Vulnerabilities

    Cisco has released critical security patches addressing multiple vulnerabilities in its IOS XR operating system, with a maximum CVSS score of 9.8 for two flaws. Network operators are urged to apply Software Maintenance Updates immediately to secure carrier…

    SecurityOnlineCVE-2026-20274CVE-2026-20274

  3. CVE-2026-20212 (CVSS 9.8): Cisco Nexus 9000 Root RCE Flaw

    Seven active exploits have been detected today, including vulnerabilities in BerriAI, Kludex, Kestra OSS, JFrog Artifactory, Sangoma Switchvox, and SonicWall SMA1000. Specifically, the Cisco Nexus 9000 vulnerability (CVE-2026-20212) allows unauthenticated…

    SecurityOnlineCVE-2026-20212CVE-2026-20212

Thu 20 Aug· 2 articles

  1. CVE-2026-20030: Cisco Crosswork SQL Command Injection Scores CVSS 10.0

    Cisco has addressed a critical SQL injection vulnerability (CVE-2026-20030) in its Crosswork platform, rated 10.0 on the CVSS scale, alongside three other critical vulnerabilities, maintaining an overall status of no confirmed exploitation. The…

    SecurityOnlineCVE-2026-20030CVE-2026-20030

  2. CVE-2026-20315 & CVE-2026-20317: Cisco Secure Workload Auth Bypass, Privilege Escalation Hit CVSS 10

    Cisco has released security hardening updates for the Secure Workload product on August 19, 2026, addressing multiple vulnerabilities, including two critical flaws rated CVSS 10 (CVE-2026-20315 and CVE-2026-20317). These vulnerabilities involve improper…

    SecurityOnlineCVE-2026-20315CVE-2026-20315

Mon 17 Aug· 1 article

  1. Critical Metabase SQLi flaw lets attackers seize full admin control

    The weekly threat intelligence report for mid-August 2026 highlights the discovery of 3,976 new vulnerabilities, emphasizing the need for immediate patching to protect enterprise systems. Key vulnerabilities include a critical SQL injection in Metabase…

    SecurityOnlineCVE-2026-72898CVE-2026-72898Exploited

Wed 12 Aug· 2 articles

  1. Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)2 articles this day · SecurityOnline first

    CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed · Cisco ASA/FTD flaw lets attackers crash firewalls, CVE-2026-20349

    1 outletCVE-2026-20349CVE-2026-20349Exploited

Fri 7 Aug· 1 article

  1. Cisco IMC Argument Injection Flaw CVE-2026-20200 Enables Root RCE, PoC Exploit Code Publicly Available

    Cisco has disclosed two critical vulnerabilities affecting its IMC (Integrated Management Controller) web interface: CVE-2026-20200 and CVE-2026-20288. The more severe CVE-2026-20200 allows root-level remote code execution (RCE) with a CVSS score of 8.8,…

    SecurityOnlineCVE-2026-20200CVE-2026-20200

Wed 29 Jul· 1 article

  1. Cisco FMC flaw CVE-2026-20316 lets hackers use hidden credentials

    Cisco has issued a warning about a vulnerability in its Firewall Management Center (FMC), identified as CVE-2026-20316, which is currently under active attack. This vulnerability allows remote attackers to log in using hidden static credentials, exposing…

    SecurityOnlineCVE-2026-20316CVE-2026-20316Exploited

Thu 2 Jul· 1 article

  1. Cisco Patches Catalyst Center File Read Flaw and Seven ClamAV DoS Bugs

    Cisco has patched a critical vulnerability in the Catalyst Center (CVE-2026-20191, CVSS 7.5) allowing unauthenticated remote attackers to read arbitrary files, posing a significant risk to enterprise networks. Additionally, seven vulnerabilities in ClamAV…

    SecurityOnlineCVE-2026-20191CVE-2026-20191

Mon 29 Jun· 1 article

  1. Cisco Unified CM RCE Flaw Exploited in the Wild as PoC Code Goes Public

    A vulnerability in Cisco Unified Communications Manager, tracked as CVE-2026-20230, has a CVSS score of 8.6 and is actively being exploited in the wild. This flaw allows attackers to gain root access by sending crafted HTTP requests to the WebDialer service,…

    SecurityOnlineCVE-2026-20230CVE-2026-20230Exploited

Fri 26 Jun· 3 articles

  1. PTC Windchill and FlexPLM2 articles this day · SecurityOnline first

    Cisco SD-WAN Zero-Day Exploited in Attacks · PTC Windchill flaw spotted; Claude Fable 5 hints at AWS return

    1 outletCVE-2026-12569CVE-2026-12569Exploited

  2. Cisco and PTC flaws under active attack, CISA adds to KEV list

    The page discusses two critical vulnerabilities that have been added to the CISA KEV Catalog on June 25, 2026. These vulnerabilities are affecting Cisco Unified Communications Manager and PTC Windchill, both of which are reportedly being actively exploited.…

    SecurityOnlineCVE-2026-20230CVE-2026-20230Exploited

Thu 18 Jun· 1 article

  1. Velvet Ant’s Operation Highland: A Decade Inside Critical Infrastructure

    The Velvet Ant group, linked to China, operated undetected within an organization's network for nearly a decade, as uncovered by Sygnia's incident response team in a campaign named Operation Highland. The hackers leveraged tools and tactics to implant a…

    SecurityOnlineCVE-2024-20399CVE-2024-20399Exploited

Wed 17 Jun· 1 article

  1. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared

    The page discusses critical vulnerabilities in the Cisco Identity Services Engine (ISE) and the ISE Passive Identity Connector (ISE-PIC). Two main vulnerabilities are highlighted: CVE-2026-20181, which allows remote code execution with a CVSS score of 9.1,…

    SecurityOnlineCVE-2026-20181CVE-2026-20181

Tue 16 Jun· 3 articles

  1. LiteSpeed cPanel Plugin3 articles this day · SecurityOnline first

    Could Apple Build Its Own OpenClaw Competitor? · Inside the Stealthy Agent Tesla Infection Chain

    1 outletCVE-2026-54420CVE-2026-54420Exploited

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device