CVE Analysis Center
494 posts | Page 2 of 21
CVE Analysis Center
Cisco Catalyst SD-WAN Manager CVE-2026-76504: Exploited API Authentication Bypass Grants Admin Access
CVE Analysis Center
BeyondTrust Remote Support CVE-2026-102764: Zero-Day Exploited Since August, Now in CISA KEV
CVE Analysis Center
Cisco Secure Email Gateway CVE-2026-76519: Actively Exploited File Write Flaw Added to CISA KEV
CVE Analysis Center
Critical CVE-2026-89111 SSRF Vulnerability in SAP Cloud SDK for Python Threatens SAP BTP OAuth2 Security
CVE Analysis Center
AhsayCBS Backup Console Under Active Exploitation: CVE-2026-105133/105134 Chain Leads From Auth Bypass to RCE, and 10.3.4.0 Does Not Close It
CVE Analysis Center
SonicWall SMA1000 CVE-2026-102255: Third Pre-Auth SSRF of 2026 Makes "Patched in September" Out of Date
CVE Analysis Center
Denmark CPR Registry: Lawful Third-Party Lookup Access Abused, About 8.8 Million People's Names, Addresses and CPR Numbers Accessed
CVE Analysis Center
CVE-2026-96940: Critical Microsoft Exchange Server Vulnerability Enables Privilege Escalation and Unauthorized Mailbox Access
CVE Analysis Center
CVE-2026-86360: Critical Remote Root Vulnerability in Dell System Update (DSU) Affects PowerEdge Servers
CVE Analysis Center
CVE-2026-106016: Path Traversal Mitigation Bypass in @fastify/static File Handling (Node.js) – Analysis, Impact, and Remediation
CVE Analysis Center
Critical CVE-2026-21589 Vulnerability Exposes Atlassian Data Center Products to Unauthenticated File Disclosure
CVE Analysis Center
Critical CVE-2026-18397: Remote Code Execution Vulnerability in Thales SConnect Threatens SWIFT Banking and Government Authentication Systems
CVE Analysis Center
Zammad Helpdesk Zero-Day Chain: Session Hijack to RCE, Then Root (CVE-2026-102489 / CVE-2026-102490, CISA KEV)
CVE Analysis Center
CVE-2026-9862: Critical OS Command Injection Vulnerability in Fortra BoKS Core Privileged Access Manager Threatens System Security
CVE Analysis Center
CVE-2026-90970: Critical GitLab AI Gateway Vulnerability Enables Command Execution on Self-Hosted Deployments
CVE Analysis Center
Critical Dell Container Storage Modules (CSM) Vulnerabilities Expose Kubernetes Environments to Remote Admin Compromise – CVE Analysis and Patch Guidance
CVE Analysis Center
BigCommerce Merchants Hit via Compromised Ribon / Ribon 1.5 Marketplace App Credentials (Fastr / Be A Part Of)
CVE Analysis Center
SolarWinds Observability Self-Hosted: Unauthenticated RCE (CVE-2026-28324) and Related Deserialization Flaw (CVE-2026-28325)
CVE Analysis Center
Active Exploitation Alert: Orkes Conductor Unauthenticated RCE via GraalVM Script Evaluators — CVE-2026-58138
CVE Analysis Center
Active Exploitation Alert: Adobe Commerce / Magento Incorrect Authorization Account Takeover — CVE-2026-71362 Added to CISA KEV
CVE Analysis Center
Active Exploitation Alert: WSO2 API Manager / Gateway JWT Authentication Bypass — CVE-2026-5430 (WSO2-2026-5328) Added to CISA KEV
CVE Analysis Center
Active Exploitation Alert: F5 BIG-IP APM CVE-2026-94127 Added to CISA KEV (OAuth Authorization Server RCE)
CVE Analysis Center
Critical JWT Authentication Vulnerability in Microsoft Titan Analytics Exposed 17 Trillion Internal Records (CVE Analysis – September 2026)
CVE Analysis Center