Posts Tagged ‘CISA KEV’
Cisco Firewall DoS Flaw Exploited in ASA and FTD
A Cisco firewall DoS flaw is being exploited: one crafted request to the SSL VPN login can make a Cisco ASA or Secure FTD firewall reload unexpectedly. Cisco tracks it as CVE-2026-76418 (CVSS 8.6), and CISA added it to the Known Exploited Vulnerabilities catalog on October 29. Only firewalls with secondary authentication set on a…
Read MoreBrotli RCE Vulnerability Node2Shell Added to CISA KEV
The Brotli RCE vulnerability CVE-2026-111497, known as Node2Shell, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog on October 27. Brotli is compression code that sits inside runtimes, web servers and browsers, so the flaw lives in places nobody lists as a product. On October 26, researchers still disagreed on how reliably it gives code…
Read MoreBeyondTrust Remote Support Zero-Day Exploited
A BeyondTrust Remote Support zero-day has been exploited since August 29, and CISA added it to the Known Exploited Vulnerabilities catalog on October 16. Google’s Mandiant ties the attacks to Armory Castle, a China-linked espionage group, and says any internet-reachable appliance on a vulnerable version should be treated as potentially compromised until it has been…
Read MoreCisco Secure Email Gateway Zero-Day Exploited Again
A Cisco Secure Email Gateway zero-day is under attack: one email with a crafted attachment lets an unauthenticated attacker write files and run commands as root. Cisco tracks it as CVE-2026-76519 (CVSS 9.8), and CISA added it to the Known Exploited Vulnerabilities catalog on October 14. It is the second Secure Email Gateway flaw exploited…
Read MoreIvanti Connect Secure Zero-Day Chain Reaches Root
Volexity found an Ivanti Connect Secure zero-day chain that gave one attacker unauthenticated root on a VPN appliance running the latest build at the time. Ivanti has fixed two of the three flaws. As of October 14, the third, the privilege escalation that turns a web-server foothold into root, has no fix. Ivanti’s own Integrity…
Read More