Tag: active exploitation
Forged JWT tokens put unpatched SharePoint servers in attacker hands
Attackers are exploiting a critical SharePoint authentication bypass days after Rapid7 shipped proof-of-concept code.
Attackers weaponize Cisco FMC static credentials before Cisco released hotfix
CISA adds actively exploited Cisco FMC static credentials flaw to its known vulnerabilities catalog.
Check Point rushes fix for actively exploited SmartConsole bypass
Check Point patched a critical SmartConsole authentication bypass under active exploitation that gives attackers full admin access to security management…
CISA adds two Joomla extension flaws to known exploited vulnerabilities catalog
CISA added iCagenda and Balbooa Forms Joomla extension flaws to its KEV catalog, citing active exploitation and remote code execution…
One missing header is all it takes to own a Gitea Docker instance
Attackers are actively exploiting CVE-2026-20896, a critical Gitea Docker authentication bypass that grants full repository access with a single HTTP…
Active Attacks Target Cisco SD-WAN Manager Flaw With No Available Fix
Cisco warns that a high severity command injection flaw in Catalyst SD WAN Manager is under active exploitation, with no…
CISA Adds Two Actively Exploited Flaws to Known Vulnerabilities Catalog
Two high severity vulnerabilities in Android and Linux kernel are now under active exploitation, forcing federal agencies to patch by…
Palo Alto Firewalls Targeted by Active Exploit of GlobalProtect VPN Flaw
Attackers are actively exploiting a PAN OS authentication bypass in GlobalProtect VPN appliances to gain unauthorized access to internal corporate…