News | CSURFACE Threat Sensor

CSURFACE Threat Sensor · 2026-10-09 ·Highlight

Exploit for CVE-2026-86218 Targets N-able N-central with Remote Code Execution

CVE-2026-86218 allows pre-auth remote code execution in N-able N-central; update to version 2026.3.1.14 or later immediately.

CVE-2026-86218 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-10-08 ·Highlight

Critical Vulnerability in Bricksforge Plugin Allows Unauthenticated File Upload

CVE-2026-85097 affects Bricksforge versions up to 3.1.8.9; update immediately to mitigate risk.

CVE-2026-85097 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-08 ·Highlight

CISA Adds CVE-2023-22894 for Strapi to KEV List Amid Exploitation Concerns

CVE-2023-22894 affects Strapi versions through 4.5.5; users should upgrade to a supported version immediately.

CVE-2023-22894 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-08 ·Highlight

CISA Adds CVE-2021-3199 to KEV List Amid Exploitation Evidence

CVE-2021-3199 affects ONLYOFFICE Docs and requires immediate patching to version 5.6.3 or later.

CVE-2021-3199 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-04

High-severity vulnerability in NetScaler ADC and Gateway requires immediate action

CVE-2026-88779 affects multiple versions of NetScaler ADC and Gateway; defenders should update to patched versions immediately.

CVE-2026-88779 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-04 ·Highlight

Citrix NetScaler Vulnerability CVE-2026-88779 Added to CISA KEV List

CVE-2026-88779 affects Citrix NetScaler products and requires immediate patching.

CVE-2026-88779 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-02 ·Highlight

Exploit for CVE-2026-0770 in Langflow Enables Remote Code Execution

CVE-2026-0770 allows remote code execution in Langflow; defenders should patch immediately.

CVE-2026-0770 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-10-02 ·Highlight

CVE-2026-102489: Zammad Session Fixation Vulnerability Added to CISA KEV List

CVE-2026-102489 affects Zammad versions 6.3.0 to 6.5.4; defenders should update to mitigate risks.

CVE-2026-102489 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-02 ·Highlight

CVE-2026-102490: Zammad Privilege Escalation Vulnerability Discovered

CVE-2026-102490 allows local Zammad users to escalate privileges to root; patch immediately.

CVE-2026-102490 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-01 ·Highlight

Critical Path Traversal Vulnerability in Fortinet FortiMail Affects Multiple Versions

CVE-2026-104286 allows unauthenticated attackers to write arbitrary files; update FortiMail immediately.

CVE-2026-104286 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-01 ·Highlight

Fortinet FortiMail Path Traversal Vulnerability Added to CISA KEV List

CVE-2026-104286 affects multiple versions of FortiMail; defenders should patch immediately.

CVE-2026-104286 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-30 ·Highlight

Critical CVE-2026-76504 Affects Cisco Catalyst SD-WAN Manager

CVE-2026-76504 allows unauthenticated remote access to admin privileges; defenders should patch immediately.

CVE-2026-76504 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-30 ·Highlight

CISA Adds Cisco Catalyst SD-WAN Manager Vulnerability to KEV List

CVE-2026-76504 allows unauthenticated remote access; update systems immediately.

CVE-2026-76504 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-29

Weaponized Exploit for CVE-2026-48710 in Kludex Starlette Framework

CVE-2026-48710 affects Kludex Starlette; users must upgrade to version 1.0.1 or later immediately.

CVE-2026-48710 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-09-29

Exploit for CVE-2026-42271 Targets LiteLLM Proxy Server

CVE-2026-42271 affects LiteLLM versions 1.74.2 to 1.83.6; upgrade to version 1.83.7 immediately.

CVE-2026-42271 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-09-29 ·Highlight

CVE-2026-86950: Apple Out-of-Bounds Write Vulnerability Added to CISA KEV

CVE-2026-86950 affects multiple Apple products; defenders should apply updates immediately.

CVE-2026-86950 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-28

Apple iOS and iPadOS Vulnerability CVE-2026-86950 Poses High Risk

CVE-2026-86950 affects Apple iOS and iPadOS; users should update to the latest versions immediately.

CVE-2026-86950 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-27 ·Highlight

Critical CVE-2026-88772 Affects Citrix NetScaler ADC and Gateway

CVE-2026-88772 affects Citrix NetScaler ADC and Gateway, and defenders should apply patches immediately.

CVE-2026-88772 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-27 ·Highlight

Citrix NetScaler ADC and Gateway Vulnerability CVE-2026-88771 Exposes Systems to Command Execution

CVE-2026-88771 allows unauthenticated attackers to execute arbitrary commands; update to patched versions immediately.

CVE-2026-88771 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-27 ·Highlight

Citrix NetScaler Vulnerability CVE-2026-88771 Added to CISA KEV List

CVE-2026-88771 affects Citrix NetScaler products and requires immediate patching to prevent exploitation.

CVE-2026-88771 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-27 ·Highlight

Citrix NetScaler Vulnerability CVE-2026-88772 Added to CISA KEV List

CVE-2026-88772 affects Citrix NetScaler products and requires immediate patching to prevent exploitation.

CVE-2026-88772 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-25 ·Highlight

CISA Adds CVE-2026-67279 to KEV List, Urges Immediate Action for MikroTik RouterOS Users

CVE-2026-67279 affects MikroTik RouterOS; users should update to versions 6.49.21, 7.23.4, or 7.24.2.

CVE-2026-67279 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-25 ·Highlight

CVE-2026-87902: WordPress Core Remote File Inclusion Vulnerability

CVE-2026-87902 affects WordPress Core; defenders should update to mitigate remote code execution risks.

CVE-2026-87902 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-25 ·Highlight

CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability Added to KEV

CVE-2026-65660 affects Microsoft SharePoint; defenders should apply patches immediately.

CVE-2026-65660 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-24 ·Highlight

Adobe Commerce and Magento Face Critical Authorization Vulnerability

CVE-2026-71362 affects Adobe Commerce and Magento; defenders should apply updates immediately.

CVE-2026-71362 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-24 ·Highlight

CISA Adds WSO2 Path Traversal Vulnerability to KEV List

CVE-2026-5430 affects multiple WSO2 products; defenders should prioritize patching.

CVE-2026-5430 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-22 ·Highlight

F5 BIG-IP Vulnerability CVE-2026-94127 Allows Remote Code Execution

CVE-2026-94127 affects F5 BIG-IP and requires immediate patching for systems using APM as an OAuth Authorization Server.

CVE-2026-94127 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-22 ·Highlight

Critical CVE-2026-93616 Affects Check Point Quantum Security Management

CVE-2026-93616 allows unauthenticated attackers to execute arbitrary scripts; defenders should patch immediately.

CVE-2026-93616 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-22 ·Highlight

Critical Vulnerability in Arista Networks VeloCloud Orchestrator Requires Immediate Action

CVE-2026-93952 allows remote attackers to access privileged functionality; defenders should patch immediately.

CVE-2026-93952 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-22 ·Highlight

Exploit for CVE-2026-85706 Targets GitLab Users

CVE-2026-85706 allows unauthenticated users to read arbitrary files; update GitLab immediately.

CVE-2026-85706 auto-generated csurface-intel exploit-public