Elektrine
Log in Register

#cisakev

16 posts · Last used 8d

Suriq - Always on Watch @suriq@infosec.exchange
· 1w ago
Our desk triaged 4,609 vulnerabilities this week and published 8. The hard part of self-hosted defense is not spotting the dangerous CVE, it is confidently ignoring the thousands that cannot reach your servers. https://suriq.io/blog/signal-triage-signal-from-noise #CVE #CISAKEV #infosec #cybersecurity
Vulnerability triage: 4,609 flaws this week, only 8 mattered
Suriq

Vulnerability triage: 4,609 flaws this week, only 8 mattered

We triaged 4,609 vulnerabilities in a week and acted on 8. Why reachability and in-the-wild exploitation, not CVSS, decide what a self-hosted team should patch.

1
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 1w ago
This weekly CVE report tracks 2,825 new flaws and 9 exploited vulnerabilities, verified against CISA KEV. WordPress, F5, Citrix and Check Point lead. #WeeklyCVEReport #ExploitedVulnerabilities #CISAKEV #WordPressSecurity #CitrixNetScaler #F5BIGIP #CheckPoint #ThreatIntel https://securityonline.info/weekly-cve-report-sept-21-27-2026/?utm_source=mastodon&utm_medium=jetpack_social
Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)
Daily CyberSecurity

Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)

This weekly CVE report tracks 2,825 new flaws and 9 exploited vulnerabilities, verified against CISA KEV. WordPress, F5, Citrix and Check Point lead.

0
0
0
0
Suriq - Always on Watch @suriq@infosec.exchange
· 1w ago
🔴 EXPLOITED WordPress core CVE-2026-87902 is being exploited to run code on sites, and it affects every release back to 4.7.0. No login needed. CISA wants it patched by Sept 28. Fix: update to WordPress 7.1.2. https://suriq.io/blog/wordpress-core-cve-2026-87902 #CVE #CISAKEV #infosec #cybersecurity
WordPress Core CVE-2026-87902: Unauth RCE, Patch to 7.1.2
Suriq

WordPress Core CVE-2026-87902: Unauth RCE, Patch to 7.1.2

CVE-2026-87902 is an unauthenticated WordPress core file-inclusion flaw that can run code, exploited in the wild and affecting every release since 4.7.0. Patch to 7.1.2.

0
0
0
0
Suriq - Always on Watch @suriq@infosec.exchange
· 3w ago
🔴 EXPLOITED CVE-2025-25249: A heap-based buffer overflow in Fortinet FortiOS and FortiSwitchManager allows unauthorized code execution via crafted packets. It is listed in CISA KEV. Affected: FortiOS 6.4 through 7.6.3 and FortiSwitchManager 7.0 and 7.2 branches. Fix: upgrade to the patched releases. CISA due date September 12, 2026. https://www.cve.org/CVERecord?id=CVE-2025-25249 #CISAKEV #infosec #cybersecurity
cve.org
0
0
0
0
Suriq - Always on Watch @suriq@infosec.exchange
· 2mo ago
🔴 EXPLOITED Cisco Secure Firewall Management Center ships a hardcoded password that lets a stranger log in with no credentials (CVE-2026-20316). It is being exploited now and sits on CISA's must-patch list. Apply the hotfix, then check logs for signs of entry. https://suriq.io/blog/cisco-fmc-hardcoded-password-cve-2026-20316 #CVE #Detection #CISAKEV #infosec
Cisco FMC hardcoded password exploited (CVE-2026-20316)
Suriq

Cisco FMC hardcoded password exploited (CVE-2026-20316)

Cisco Secure Firewall Management Center ships a static password (CVE-2026-20316) that lets unauthenticated attackers log in. Now in CISA KEV. Patch and hunt.

0
0
0
0
Suriq - Always on Watch @suriq@infosec.exchange
· 2mo ago
🔴 EXPLOITED CISA just flagged a Fortinet firewall flaw as actively exploited. CVE-2025-68686 bypasses the fix meant to kick attackers out of hacked FortiGates. They keep reading the device's files. Patch FortiOS to 7.6.2 or 7.4.7, then rotate secrets. https://suriq.io/blog/fortios-symlink-patch-bypass-cve-2025-68686-kev #CISAKEV #infosec #cybersecurity
FortiOS symlink patch bypass exploited: CVE-2025-68686
Suriq

FortiOS symlink patch bypass exploited: CVE-2025-68686

CISA added CVE-2025-68686 to its exploited catalog: a bypass of Fortinet

0
0
0
0
Suriq - Always on Watch @suriq@infosec.exchange
· 2mo ago
🔴 EXPLOITED Check Point's SmartConsole flaw (CVE-2026-16232) lets an unauthenticated attacker log in as full admin. It is being exploited now. Affects Security Management servers reachable over the network. Fix: limit management access to your admin IPs, then patch. https://suriq.io/blog/check-point-smartconsole-cve-2026-16232-exploited #CVE #Phishing #CISAKEV #infosec
Check Point SmartConsole Flaw CVE-2026-16232 Exploited
Suriq

Check Point SmartConsole Flaw CVE-2026-16232 Exploited

Check Point SmartConsole flaw CVE-2026-16232 is exploited and in CISA KEV, letting an unauthenticated attacker log in as full admin. Who is exposed and how to close it fast.

0
0
0
0
Suriq - Always on Watch @suriq@infosec.exchange
· 2mo ago
Third on-prem SharePoint RCE this month: CVE-2026-50522 (CVSS 9.8) went from public PoC to active exploitation in hours. All three July flaws steal the server machine key. Patch, then ROTATE the key, or a patched box is still owned. #SharePoint #infosec https://suriq.io/blog/sharepoint-cve-2026-50522-rotate-machine-keys #CVE #Detection #CISAKEV #infosec
SharePoint CVE-2026-50522: patch, then rotate the machine key
Suriq

SharePoint CVE-2026-50522: patch, then rotate the machine key

CVE-2026-50522, a CVSS 9.8 SharePoint RCE, went from public PoC to active exploitation in hours. It steals machine keys, so patching without rotating them leaves the server owned.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
Our weekly CVE report: 1,571 new flaws and 6 actively exploited vulnerabilities hit CISA KEV, including ColdFusion and Joomla RCE. #CVE #CISAKEV #Vulnerability #InfoSec #CyberSecurity https://securityonline.info/weekly-cve-report-2026-07-06/?utm_source=mastodon&utm_medium=jetpack_social
Weekly CVE Report: 1,571 New Flaws and 6 Actively Exploited Bugs (July 6–12, 2026)
Daily CyberSecurity

Weekly CVE Report: 1,571 New Flaws and 6 Actively Exploited Bugs (July 6–12, 2026)

Our weekly CVE report: 1,571 new flaws and 6 actively exploited vulnerabilities hit CISA KEV, including ColdFusion and Joomla RCE.

0
0
0
0
Suriq - Always on Watch @suriq@infosec.exchange
· 3mo ago
🔴 EXPLOITED Two Joomla page builders have CVSS-10 flaws that let anyone upload a webshell with no login: SP Page Builder and Page Builder CK. Both are exploited and on CISA's KEV list. Patch, then hunt: the fix won't remove the rogue admin it leaves behind. https://suriq.io/blog/joomla-page-builder-uploads-exploited-kev #CVE #CISAKEV #infosec #cybersecurity
Joomla page-builder RCEs on CISA KEV: patch, then hunt
Suriq

Joomla page-builder RCEs on CISA KEV: patch, then hunt

CISA flagged two CVSS-10 Joomla page-builder flaws, SP Page Builder (CVE-2026-48908) and Page Builder CK (CVE-2026-56290), as exploited. Patch, then hunt the webshells and rogue admins they leave.

0
0
0
0
You've seen all posts