News

News and articles related to high-impact vulnerabilities

CSURFACE Threat Sensor · 2026-09-22 ·Highlight
CVE-2026-93616: Critical Path Traversal Vulnerability in Check Point Products
CVE-2026-93616 affects multiple Check Point products; defenders should apply patches immediately.
CVE-2026-93616 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-22 ·Highlight
Check Point VPN Vulnerability CVE-2026-85102 Added to CISA KEV List
CVE-2026-85102 affects Check Point products and requires immediate patching to prevent exploitation.
CVE-2026-85102 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-22 ·Highlight
CISA Adds CVE-2026-94127 for F5 BIG-IP APM Buffer Overflow Vulnerability
CVE-2026-94127 allows unauthenticated attackers to execute remote code; F5 recommends immediate patching.
CVE-2026-94127 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-22 ·Highlight
CVE-2026-93952: Arista VeloCloud Orchestrator Vulnerability Exposed
CVE-2026-93952 affects Arista VeloCloud Orchestrator; apply patches immediately.
CVE-2026-93952 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-21 ·Highlight
Zyxel GS1900 Series Switches Vulnerability Added to CISA KEV List
CVE-2026-7273 affects Zyxel GS1900 Series Switches; update firmware to mitigate risks.
CVE-2026-7273 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-19 ·Highlight
Gravity Forms Plugin Vulnerable to Critical Arbitrary File Upload
CVE-2026-84434 affects all Gravity Forms versions up to 3.1.0.4; update immediately to mitigate risk.
CVE-2026-84434 auto-generated csurface-intel new-disclosure
CSURFACE Threat Sensor · 2026-09-16 ·Highlight
Critical CVE-2026-76460 in Cisco ISE Allows Remote Authentication Bypass
CVE-2026-76460 allows unauthenticated attackers to bypass authentication on Cisco ISE; defenders should apply patches immediately.
CVE-2026-76460 auto-generated csurface-intel new-disclosure
CSURFACE Threat Sensor · 2026-09-16 ·Highlight
CISA Adds Google Pixel Improper Authorization Vulnerability to KEV List
CVE-2026-58704 affects Google Pixel devices; update your devices to mitigate the risk.
CVE-2026-58704 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-16 ·Highlight
CISA Adds CVE-2026-76460 to KEV List for Cisco Identity Services Engine
CVE-2026-76460 allows unauthenticated attackers to bypass authentication; update your systems immediately.
CVE-2026-76460 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-15
Google Android CVE-2026-58704 Allows Privilege Escalation via Cellular Modem
CVE-2026-58704 affects Google Android; defenders should apply available patches immediately.
CVE-2026-58704 auto-generated csurface-intel new-disclosure
CSURFACE Threat Sensor · 2026-09-15 ·Highlight
Critical Vulnerability in Issabel Framework Allows Remote Code Execution
CVE-2026-89026 affects Issabel Framework; defenders should update to the latest version immediately.
CVE-2026-89026 auto-generated csurface-intel new-disclosure
CSURFACE Threat Sensor · 2026-09-14 ·Highlight
Critical Vulnerability in Cisco Secure Email Allows Remote Command Execution
CVE-2026-76461 affects Cisco Secure Email; defenders should apply patches immediately.
CVE-2026-76461 auto-generated csurface-intel new-disclosure
CSURFACE Threat Sensor · 2026-09-14 ·Highlight
Cisco Secure Email Gateway SQL Injection Vulnerability Added to KEV List
CVE-2026-76461 affects Cisco Secure Email Gateway; defenders should patch ASAP.
CVE-2026-76461 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-12 ·Highlight
GitLab Patches Critical Vulnerability CVE-2026-85706 Affecting Multiple Versions
CVE-2026-85706 allows unauthenticated users to read arbitrary files; update GitLab CE/EE immediately.
CVE-2026-85706 auto-generated csurface-intel new-disclosure
CSURFACE Threat Sensor · 2026-09-11 ·Highlight
JFrog Artifactory Improper Authentication Vulnerability Added to KEV List
CVE-2026-42018 affects JFrog Artifactory; defenders should update to the latest version immediately.
CVE-2026-42018 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-11 ·Highlight
JFrog Artifactory Vulnerability CVE-2026-42016 Added to CISA KEV List
CVE-2026-42016 affects JFrog Artifactory versions before 7.133.11; update immediately to mitigate risks.
CVE-2026-42016 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-11 ·Highlight
CISA Adds GitLab Path Traversal Vulnerability CVE-2026-85706 to KEV List
CVE-2026-85706 affects GitLab CE/EE versions and requires immediate patching by users.
CVE-2026-85706 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-11 ·Highlight
CVE-2026-84869: ConnectWise ScreenConnect Vulnerability Allows Unauthorized File Transfers
CVE-2026-84869 affects ConnectWise ScreenConnect and requires immediate patching to prevent exploitation.
CVE-2026-84869 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-10 ·Highlight
Exploit for CVE-2026-83548 Targets SonicWall SMA1000 Devices
CVE-2026-83548 allows remote unauthenticated access; defenders should apply patches immediately.
CVE-2026-83548 auto-generated csurface-intel exploit-public
CSURFACE Threat Sensor · 2026-09-10 ·Highlight
Exploit for CVE-2026-20079 Targets Cisco Secure Firewall Management Center
CVE-2026-20079 allows unauthenticated attackers to gain root access; defenders should apply patches immediately.
CVE-2026-20079 auto-generated csurface-intel exploit-public
CSURFACE Threat Sensor · 2026-09-10 ·Highlight
CVE-2026-86060: MikroTik RouterOS Flaw Allows Privilege Escalation via SSH
CVE-2026-86060 affects MikroTik RouterOS; update to fixed versions immediately.
CVE-2026-86060 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-10 ·Highlight
CVE-2026-67277: MikroTik RouterOS Vulnerability Exposes Critical Functions
CVE-2026-67277 affects MikroTik RouterOS and requires immediate patching to prevent exploitation.
CVE-2026-67277 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-09 ·Highlight
Critical CVE-2026-87827 Affects KGUARD DVR Devices, Exploited by Mirai Botnets
Defenders should immediately update KGUARD DVR firmware to mitigate CVE-2026-87827.
CVE-2026-87827 auto-generated csurface-intel new-disclosure
CSURFACE Threat Sensor · 2026-09-09
Newfold Plugins Expose Authentication Bypass Vulnerability (CVE-2026-80099)
CVE-2026-80099 allows unauthenticated attackers to bypass authentication in several Newfold plugins; defenders should update immediately.
CVE-2026-80099 auto-generated csurface-intel new-disclosure
CSURFACE Threat Sensor · 2026-09-09
Google Chrome Vulnerability CVE-2026-87491 Allows Remote Code Execution
CVE-2026-87491 affects Google Chrome versions prior to 153.0.8010.36; users should update immediately.
CVE-2026-87491 auto-generated csurface-intel new-disclosure
CSURFACE Threat Sensor · 2026-09-09 ·Highlight
CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability
CVE-2026-87491 allows remote code execution in Chromium-based browsers; update to version 153.0.8010.36 or later.
CVE-2026-87491 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-09 ·Highlight
Fortinet Buffer Overflow Vulnerability Added to CISA KEV List
CVE-2025-25249 allows attackers to execute unauthorized code via crafted packets; defenders should patch immediately.
CVE-2025-25249 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-09 ·Highlight
Citrix NetScaler Authentication Bypass Vulnerability Added to CISA KEV List
CVE-2026-19490 affects Citrix NetScaler products; defenders should apply patches immediately.
CVE-2026-19490 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-09 ·Highlight
CISA Adds CVE-2026-20079 to KEV List for Cisco Firewall Management Vulnerability
CVE-2026-20079 allows unauthenticated remote attackers to bypass authentication; defenders should patch immediately.
CVE-2026-20079 auto-generated csurface-intel kev-addition
CSURFACE Threat Sensor · 2026-09-08 ·Highlight
Critical vulnerability in ConnectWise ScreenConnect allows unauthorized file transfers
CVE-2026-84869 allows unauthorized file transfers in ConnectWise ScreenConnect; update your systems immediately.
CVE-2026-84869 auto-generated csurface-intel new-disclosure
1 2 3 4 5 ... ... 11 12