Our Blog
CISA added one new entry to its Known Exploited Vulnerabilities catalog this week: CVE-2026-20316, an actively exploited authentication bypass in Cisco Secure Firewall Management Center (FMC) caused by static credentials. This flaw matters operationally because FMC serves as the central management plane for enterprise firewalls and threat policies, meaning initial access gives attackers visibility into overall network security architectures and potential exploit chaining vectors. Organizations operating Cisco Secure FMC software must apply vendor hotfixes immediately to prevent unauthorized remote access to management interfaces.
Reading time 10 minutes
CISA added eight new vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog during the past seven days, spanning enterprise network orchestrators (Arista VeloCloud Orchestrator), security gateways (Check Point SmartConsole), firewalls & SD-WAN (Fortinet FortiOS), collaboration platforms (Microsoft SharePoint), web publishing platforms (WordPress Core), AI application frameworks (Langflow), and consumer/SOHO networking firmware (DD-WRT). The most significant operational trend is the active exploit chaining targeting web core architectures alongside perimeter authentication bypasses and deserialization vectors. Security, vulnerability management, and infrastructure teams should prioritize internet-facing management consoles, content management instances, and collaboration servers for immediate validation and remediation activity.
Reading time 10 minutes
CISA added nine new vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog during the past seven days, spanning enterprise collaboration platforms (Microsoft SharePoint), identity services (AD FS), sandboxing solutions (Fortinet FortiSandbox), access gateways (SonicWall SMA1000), financial ERP suites (Oracle E-Business Suite), and industrial automation protocols (KNX). The most significant operational trend is the concentrated targeting of remote access gateways, internal sandboxing infrastructure, and enterprise collaboration platforms for unauthenticated command injection, SSRF, and privilege escalation. Security, vulnerability management, and infrastructure teams should prioritize perimeter appliances, identity providers, and SharePoint environments for immediate validation and remediation activity.
Reading time 10 minutes
CISA added eight new vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog during the past seven days, spanning legacy Cisco infrastructure, multiple Joomla ecosystem extensions, Adobe ColdFusion, Langflow, and Microsoft SharePoint Server. The most significant operational trend is the concentration of unauthenticated file upload vulnerabilities affecting public-facing web applications, many of which provide immediate paths to web shell deployment and remote code execution. Security, vulnerability management, and infrastructure teams should prioritise internet-facing web applications and collaboration platforms for immediate exposure validation and remediation activity.
Reading time 10 minutes