News | CSURFACE Threat Sensor

CSURFACE Threat Sensor · 2026-07-29 ·Highlight

CISA Adds Cisco Secure Firewall Management Center Vulnerability to KEV List

CVE-2026-20316 affects Cisco Secure Firewall Management Center; update to mitigate risks.

CVE-2026-20316 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-27 ·Highlight

Critical Vulnerability in Arista Networks VeloCloud Orchestrator Exposed

CVE-2026-16812 allows remote attackers to access privileged functions; patch immediately.

CVE-2026-16812 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-27

High-severity XSS vulnerability in RexTheme Product Feed Manager

CVE-2026-59553 affects RexTheme Product Feed Manager versions up to 7.6.1; update to the latest version immediately.

CVE-2026-59553 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-27 ·Highlight

Fortinet FortiOS Vulnerability CVE-2025-68686 Added to CISA KEV List

CVE-2025-68686 allows attackers to bypass patches in FortiOS; defenders should apply updates immediately.

CVE-2025-68686 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-27 ·Highlight

CVE-2026-16812: Arista VeloCloud Orchestrator OS Command Injection Vulnerability

CVE-2026-16812 affects Arista VeloCloud Orchestrator and requires immediate patching by defenders.

CVE-2026-16812 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-22 ·Highlight

Critical Authentication Bypass in Check Point SmartConsole Affects Remote Management

CVE-2026-16232 allows unauthenticated attackers to gain administrative access; defenders should apply patches immediately.

CVE-2026-16232 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-22 ·Highlight

CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability

CVE-2026-16232 allows unauthenticated attackers to gain administrative access; defenders should restrict Trusted Clients.

CVE-2026-16232 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-22 ·Highlight

CISA Adds CVE-2026-50522 to KEV List Amid Exploitation Evidence

CVE-2026-50522 affects Microsoft SharePoint and defenders should apply available patches immediately.

CVE-2026-50522 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-21 ·Highlight

CISA Adds DD-WRT Buffer Overflow Vulnerability to KEV List

CVE-2021-27137 affects DD-WRT; users should disable UPnP to mitigate risks.

CVE-2021-27137 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-21 ·Highlight

CISA Adds WordPress SQL Injection Vulnerability CVE-2026-60137 to KEV List

CVE-2026-60137 affects WordPress Core and requires immediate patching to prevent SQL Injection attacks.

CVE-2026-60137 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-21 ·Highlight

CVE-2026-63030: WordPress Core Vulnerability Allows SQL Injection and RCE

CVE-2026-63030 affects WordPress Core; update to versions 6.9.5 or 7.0.2 immediately.

CVE-2026-63030 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-21 ·Highlight

Langflow Remote Code Execution Vulnerability CVE-2026-0770 Added to CISA KEV

CVE-2026-0770 allows remote code execution on Langflow installations; defenders should patch immediately.

CVE-2026-0770 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-17 ·Highlight

Critical SQL Injection Vulnerability in WordPress Affects Versions 6.9.x and 7.0.x

CVE-2026-63030 affects WordPress versions 6.9.x before 6.9.5 and 7.0.x before 7.0.2; update immediately.

CVE-2026-63030 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-16 ·Highlight

CISA Adds CVE-2026-58644 to KEV List Amid Exploitation Concerns

CVE-2026-58644 affects Microsoft SharePoint and defenders should apply patches immediately.

CVE-2026-58644 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-16 ·Highlight

Fortinet FortiSandbox OS Command Injection Vulnerability Added to CISA KEV List

CVE-2026-39808 affects FortiSandbox 4.4.0 to 4.4.8; defenders should apply patches immediately.

CVE-2026-39808 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-16 ·Highlight

Fortinet FortiSandbox OS Command Injection Vulnerability Added to CISA KEV List

CVE-2026-25089 affects multiple FortiSandbox versions; defenders should apply patches immediately.

CVE-2026-25089 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-15 ·Highlight

CISA Adds CVE-2026-46817 to KEV List for Oracle E-Business Suite

CVE-2026-46817 affects Oracle E-Business Suite; defenders should apply patches immediately.

CVE-2026-46817 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-15 ·Highlight

CISA Adds CVE-2023-4346 to KEV List: KNX Protocol Vulnerability

CVE-2023-4346 affects KNX Protocol devices; implement access controls and monitor networks.

CVE-2023-4346 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-14

SonicWall SMA1000 Vulnerability CVE-2026-15410 Exposes Systems to Code Injection

CVE-2026-15410 affects SonicWall SMA1000; defenders should apply patches immediately.

CVE-2026-15410 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-14 ·Highlight

Critical SSRF Vulnerability in SonicWall SMA1000 Exposes Users

CVE-2026-15409 affects SonicWall SMA1000; defenders should apply patches immediately.

CVE-2026-15409 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-14 ·Highlight

Critical CVE-2026-58644 Affects Microsoft SharePoint Enterprise Server 2016

CVE-2026-58644 allows unauthorized code execution in Microsoft SharePoint; defenders should patch immediately.

CVE-2026-58644 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-14 ·Highlight

Critical CVE-2026-56164 in Microsoft SharePoint Allows Unauthorized Privilege Elevation

CVE-2026-56164 affects Microsoft SharePoint Enterprise Server 2016; defenders should apply patches immediately.

CVE-2026-56164 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-14 ·Highlight

SonicWall SMA1000 Appliances Vulnerable to SSRF Exploit

CVE-2026-15409 affects SonicWall SMA1000 Appliances; update firmware immediately to mitigate risks.

CVE-2026-15409 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-14 ·Highlight

CISA Adds CVE-2026-56164 to KEV List for SharePoint Server

CVE-2026-56164 affects Microsoft SharePoint Server; defenders should apply patches immediately.

CVE-2026-56164 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-14 ·Highlight

SonicWall SMA1000 Appliances Vulnerable to Code Injection Attack

CVE-2026-15410 affects SonicWall SMA1000 Appliances; update to mitigate risks.

CVE-2026-15410 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-10 ·Highlight

CISA Adds Balbooa Forms Vulnerability CVE-2026-56291 to KEV List

CVE-2026-56291 exposes Balbooa Forms to unauthenticated file uploads; organizations must patch immediately.

CVE-2026-56291 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-10 ·Highlight

CISA Adds CVE-2026-48939 to KEV List Due to Active Exploitation

CVE-2026-48939 affects iCagenda and defenders should immediately restrict file uploads.

CVE-2026-48939 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-07-09 ·Highlight

Critical RCE Vulnerability in Balbooa Forms Extension for Joomla

CVE-2026-56291 allows unauthenticated file uploads, leading to RCE; update the extension immediately.

CVE-2026-56291 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-08 ·Highlight

Critical Vulnerability in Blocksy Companion Pro Plugin Allows Remote Code Execution

CVE-2026-58480 affects Blocksy Companion Pro plugin versions before 2.1.47; update immediately.

CVE-2026-58480 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-07-07 ·Highlight

Critical OS Command Injection Vulnerability in Decolua 9Router

CVE-2026-59800 exposes 9Router to OS command injection; update to version 0.4.44 or later immediately.

CVE-2026-59800 auto-generated csurface-intel new-disclosure