The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability affecting N-able N-central to its Known Exploited Vulnerabilities (KEV)…
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing…
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s…
IBM Langflow Code Injection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a newly disclosed security flaw, CVE-2026-20316, impacting Cisco Secure Firewall Management Center…
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD…
OpenWrt has released versions 24.10.8 and 25.12.5 to patch a critical DHCPv6 stack overflow vulnerability, CVE-2026-53921, rated 9.8 on CVSS 3.1. The…
A maximum-severity command injection vulnerability in on-premises versions of Arista VeloCloud Orchestrator (VCO) is being actively exploited. Tracked as CVE-2026-16812 with a…
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s…