CVE Analysis Center
443 posts | Page 1 of 19
CVE Analysis Center
Active Exploitation Alert: ConnectWise ScreenConnect Improper Privilege Management / Missing Authorization (CVE-2026-84869) Added to CISA KEV — Unauthorized File Transfer and Execution via Active Remote Session
CVE Analysis Center
Active Exploitation Alert: Cisco Identity Services Engine Authentication Bypass (CVE-2026-76460) Added to CISA KEV — Unauthenticated API Bypass to Root on ISE
CVE Analysis Center
Active Exploitation Alert: Cisco Secure Firewall Management Center Authentication Bypass (CVE-2026-20079) Added to CISA KEV — Unauthenticated Root on FMC
CVE Analysis Center
Active Exploitation Alert: Cisco Secure Email Gateway AsyncOS SQL Injection (CVE-2026-76461) Added to CISA KEV — Unauthenticated Root via Crafted Email
CVE Analysis Center
Active Exploitation Alert: Adobe Commerce / Magento StyleSmuggler Unauthenticated RCE (CVE-2026-75650) Added to CISA KEV — Hotfix and Credential Rotation Guidance
CVE Analysis Center
Active Exploitation Alert: Citrix NetScaler ADC/Gateway Authentication Bypass (CVE-2026-19490) Added to CISA KEV — Patch and Forensic Triage Guidance
CVE Analysis Center
Critical CVE-2026-20212 Vulnerability in Cisco Nexus 9000 Series Switches Allows Unauthenticated Remote Code Execution
CVE Analysis Center
Critical CVE-2026-73749 Remote Code Execution Vulnerability in HPE ArubaOS-CX: Affected Versions, Risks, and Patch Guidance
CVE Analysis Center
Critical CVE-2026-18431 Zero-Click RCE Vulnerability in Avada WordPress Theme and Fusion Builder Plugin – Analysis and Mitigation Guide
CVE Analysis Center
Critical Unpatched Vulnerabilities in Kaltura mwEmbed Expose Organizations to Remote Code Execution and File Read Attacks (CVE-2026-19912, CVE-2026-19913)
CVE Analysis Center
CVE-2026-18963 Analysis: Critical Keycloak Password Reset Vulnerability Allows Unauthenticated Account Takeover
CVE Analysis Center
Critical Command Injection Vulnerability in Snowflake snowflake-connector-net GitHub Actions Exposes Jira Credentials
CVE Analysis Center
CVE-2026-19478: Critical GitLab CE/EE GraphQL Vulnerability Enables Remote Deletion of Public Projects and User Data
CVE Analysis Center
Critical RCE and Credential Theft Vulnerabilities in Belgian eID Middleware (Fedict/eid-mw) Impacting Banks and Government Systems
CVE Analysis Center
Critical CVE Analysis: Malicious SIM Card Code Execution Vulnerability in Quectel and Qualcomm-Based Cellular IoT Devices
CVE Analysis Center
CVE-2026-64638: Critical Pre-Auth XSS Vulnerability in WordPress Allows Remote Code Execution – Update to 7.0.3 Urgently
CVE Analysis Center
CVE-2026-17583: Critical DNA Data Tampering Vulnerability in Thermo Fisher Applied Biosystems Software
CVE Analysis Center
Critical CVE-2026-63077: Unauthenticated Remote Code Execution Vulnerability in JetBrains TeamCity On-Premises
CVE Analysis Center
Critical Redis Vulnerability CVE-2024-27348 Enables Remote Code Execution via RESTORE Command: Risk Analysis and Mitigation Strategies
CVE Analysis Center
CVE-2026-14266: Critical 7-Zip XZ Archive Decoder Vulnerability Enables Remote Code Execution (Patch in 26.02)
CVE Analysis Center
Critical wp2shell CVEs Enable Unauthenticated Remote Code Execution in WordPress Core (CVE-2026-63030, CVE-2026-60137)
CVE Analysis Center
Chrome 150 and Firefox 152 Patch Critical Vulnerabilities: CVE Analysis and Enterprise Risk Advisory
CVE Analysis Center
Critical CVE-2026-2699 and CVE-2026-2701 Vulnerabilities Force Immediate Shutdown of Progress ShareFile Storage Zone Controller v5.x
CVE Analysis Center