CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability These types of vulnerabilities are frequent attack vectors…

U.S. CISA adds a flaw in Microsoft Windows to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 14/Jan 11:45

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw impacting Microsoft Windows to its Known Exploited Vulnerabilities...

Fortinet SSO Vulnerability Actively Exploited to Hack Firewalls and Gain Admin Access

itsecuritynews.info - 22/Jan 04:15

A critical vulnerability in Fortinet’s Single Sign-On (SSO) feature for FortiGate firewalls, tracked as CVE-2025-59718, is under active...

Fortinet SSO Vulnerability Actively Exploited to Hack Firewalls and Gain Admin Access

itsecuritynews.info - 22/Jan 04:15

A critical vulnerability in Fortinet’s Single Sign-On (SSO) feature for FortiGate firewalls, tracked as CVE-2025-59718, is under active...

Fortinet Warns of Active FortiSIEM RCE Exploitation

itsecuritynews.info - 16/Jan 14:05

Fortinet warns CVE-2025-64155 is actively exploited for unauthenticated RCE on on-prem FortiSIEM via TCP 7900. The post Fortinet Warns of Active...

Fortinet Warns of Active FortiSIEM RCE Exploitation

itsecuritynews.info - 16/Jan 14:05

Fortinet warns CVE-2025-64155 is actively exploited for unauthenticated RCE on on-prem FortiSIEM via TCP 7900. The post Fortinet Warns of Active...

Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393)

itsecuritynews.info - 16/Jan 15:04

Cisco has finally shipped security updates for its Email Security Gateway and Secure Email and Web Manager devices, which fix CVE-2025-20393, a...

Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393)

itsecuritynews.info - 16/Jan 15:04

Cisco has finally shipped security updates for its Email Security Gateway and Secure Email and Web Manager devices, which fix CVE-2025-20393, a...

Fortinet fixed two critical flaws in FortiFone and FortiSIEM

securityaffairs.co - 14/Jan 15:07

Fortinet fixed six security flaws, including two critical bugs in FortiFone and FortiSIEM that attackers could exploit without authentication....

Cisco fixes Unified Communications RCE zero day exploited in attacks

bleepingcomputer.com - 21/Jan 22:16

Cisco has fixed a critical Unified Communications and Webex Calling remote code execution vulnerability, tracked as CVE-2026-20045, that has been...

Cisco fixes Unified Communications RCE zero day exploited in attacks

bleepingcomputer.com - 21/Jan 22:16

Cisco has fixed a critical Unified Communications and Webex Calling remote code execution vulnerability, tracked as CVE-2026-20045, that has been...

Rubriques :

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Articles similaires

U.S. CISA adds a flaw in Microsoft Windows to its Known Exploited Vulnerabilities catalog

Fortinet SSO Vulnerability Actively Exploited to Hack Firewalls and Gain Admin Access

Fortinet SSO Vulnerability Actively Exploited to Hack Firewalls and Gain Admin Access

Fortinet Warns of Active FortiSIEM RCE Exploitation

Fortinet Warns of Active FortiSIEM RCE Exploitation

Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393)

Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393)

Fortinet fixed two critical flaws in FortiFone and FortiSIEM

Cisco fixes Unified Communications RCE zero day exploited in attacks

Cisco fixes Unified Communications RCE zero day exploited in attacks

Les derniers communiqués