Updated 2026-09-11 22:24:37.183379+00:00
Active In-The-Wild Exploitation
BleepingComputer
CISA
CISA KEV
Google Cloud Threat Intelligence (Mandiant)
The Hacker News
Authentication bypass using an alternate path or channel in Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management that could allow an unauthenticated, remote attacker to bypass authentication and execute script files to obtain root access.
Affected:
Cisco Secure Firewall Management Center (< 7.4.2)
Cisco Secure Firewall Management Center (FMC) Software and Security Cloud Control (SCC) Firewall Management
CWEs:
CWE-287
Correlated in 2 threat reports
|
Updated 2026-09-24 19:50:52.683737+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Canadian Centre For Cyber Security Alerts
Check Point Research
NIST NVD
Nist National Vulnerability Database Nvd
SOC Prime
Soc Prime Detection News
The Hacker News
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
CWEs:
CWE-648
Correlated in 1 threat report
|
Updated 2026-09-24 19:51:01.098551+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Canadian Centre For Cyber Security Alerts
NIST NVD
Nist National Vulnerability Database Nvd
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.
CWEs:
CWE-269
CWE-862
Correlated in 1 threat report
|
Updated 2026-09-11 22:24:36.857829+00:00
Active In-The-Wild Exploitation
BleepingComputer
CISA
CISA KEV
Google Cloud Threat Intelligence (Mandiant)
Mandiant Threat Intelligence
The Hacker News
Missing authentication for critical function in Oracle PeopleSoft Enterprise PeopleTools that could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools; original research characterizes the same issue as a critical remote code execution vulnerability in the Environment Management component.
Affected:
Oracle PeopleSoft Enterprise PeopleTools
Oracle PeopleSoft Enterprise PeopleTools (8.60)
CWEs:
CWE-306
CWE-502
Correlated in 2 threat reports
|
Updated 2026-09-24 23:51:41.706898+00:00
Active In-The-Wild Exploitation
CERT-EU
CISA
CISA KEV
Canadian Centre for Cyber Security
Rapid7
Rapid7 Threat Research
Heap-based buffer overflow in F5 BIG-IP APM that may allow unauthenticated remote code execution in the affected OAuth configuration.
Affected:
F5 BIG-IP Access Policy Manager (F5 BIG-IP releases identified in the F5 advisory; affected configuration requires APM access policy and OAuth profile)
Correlated in 1 threat report
|
Updated 2026-09-24 19:51:02.741409+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Canadian Centre For Cyber Security Alerts
Check Point Research
NIST NVD
Nist National Vulnerability Database Nvd
SOC Prime
Soc Prime Detection News
The Hacker News
RouterOS contains an argument-handling flaw in the SSH login
path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS login helper.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)
CWEs:
CWE-88
Correlated in 1 threat report
|
Updated 2026-09-24 19:51:06.055280+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Canadian Centre For Cyber Security Alerts
NIST NVD
Nist National Vulnerability Database Nvd
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.
This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)
CWEs:
CWE-306
Correlated in 1 threat report
|
Updated 2026-09-24 19:51:04.410767+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Canadian Centre For Cyber Security Alerts
NIST NVD
Nist National Vulnerability Database Nvd
SOC Prime
Securityweek
Soc Prime Detection News
The Hacker News
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CWEs:
CWE-285
CWE-693
Correlated in 1 threat report
|
Updated 2026-09-24 19:51:07.672451+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
NIST NVD
Nist National Vulnerability Database Nvd
SOC Prime
Soc Prime Detection News
The Hacker News
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.
CWEs:
CWE-276
Correlated in 1 threat report
|
Updated 2026-08-30 08:05:26.944551+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Public-source record for CVE-2015-3246 in CISA Adds Six Known Exploited Vulnerabilities to Catalog.
Correlated in 1 threat report
|
Updated 2026-08-30 08:05:26.944551+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Public-source record for CVE-2015-5287 in CISA Adds Six Known Exploited Vulnerabilities to Catalog.
Correlated in 1 threat report
|
Updated 2026-08-30 08:05:26.944551+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Public-source record for CVE-2019-1068 in CISA Adds Six Known Exploited Vulnerabilities to Catalog.
Correlated in 1 threat report
|
Updated 2026-08-30 08:05:26.944551+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Public-source record for CVE-2021-23758 in CISA Adds Six Known Exploited Vulnerabilities to Catalog.
Correlated in 1 threat report
|
Updated 2026-08-30 08:05:26.944551+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Public-source record for CVE-2022-0995 in CISA Adds Six Known Exploited Vulnerabilities to Catalog.
Correlated in 1 threat report
|
Updated 2026-08-30 08:05:26.748206+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
Public-source record for CVE-2023-49105 in CISA Adds Three Known Exploited Vulnerabilities to Catalog.
Correlated in 2 threat reports
|
Updated 2026-08-28 08:04:51.380013+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
CISA Known Exploited Vulnerabilities
DrayTek Vigor Routers OS Command Injection Vulnerability
Correlated in 1 threat report
|
Updated 2026-08-28 08:04:56.746681+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
CISA Known Exploited Vulnerabilities
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Correlated in 1 threat report
|
Updated 2026-08-28 08:04:52.706222+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
CISA Known Exploited Vulnerabilities
ConnectWise ScreenConnect Path Traversal Vulnerability
Correlated in 1 threat report
|
Updated 2026-08-28 08:04:56.509430+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
CISA Known Exploited Vulnerabilities
Cisco ASA and FTD Privilege Escalation Vulnerability
Correlated in 1 threat report
|
Updated 2026-08-28 08:04:53.889362+00:00
Active In-The-Wild Exploitation
CISA
CISA KEV
CISA Known Exploited Vulnerabilities
Adobe ColdFusion Improper Access Control Vulnerability
Correlated in 1 threat report
|