Loading feed…
Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
Check Point has identified a critical vulnerability in multiple products that allows attackers to assign incorrect permissions to critical resources, potentially…
Confirm whether Check Point is in your estate.
all High · vulnerabilities · exploited in the wild
Updated
Siemens Software Center has a vulnerability that could allow an authenticated local attacker to execute arbitrary code by placing a malicious DLL in a searched directory.
Next step: Confirm whether Siemens Software Center is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 3Vendor statement missing. no VendorResearcher coverage missing. no Researcher3 signals
Only official coverage so far. Treat as an early signal.
CISA has added one new vulnerability to its known-exploited catalogue, based on evidence of active exploitation.
Next step: Confirm whether Arista VeloCloud Orchestrator is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 2Vendor statement missing. no VendorResearcher coverage missing. no Researcher2 signals
Only official coverage so far. Treat as an early signal.
Part of Hackers plant GSocket on Linux servers for persistent access+2 related reports
CISA has added two new vulnerabilities to its known-exploited catalogue, based on evidence of active exploitation.
Next step: Confirm whether VMware Telco Cloud Platform is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 2Vendor statement missing. no VendorResearcher coverage missing. no Researcher2 signals
Only official coverage so far. Treat as an early signal.
CISA has added two new vulnerabilities to its known-exploited catalogue, based on evidence of active exploitation.
Next step: Confirm whether Cisco Secure Firewall Threat Defense is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 2Vendor statement missing. no VendorResearcher coverage missing. no Researcher2 signals
Only official coverage so far. Treat as an early signal.
CISA has added two new vulnerabilities to its known-exploited catalogue, based on evidence of active exploitation.
Next step: Confirm whether Ivanti Connect Secure is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Check whether your organisation or a supplier is exposed to the same operation.
A UK intelligence agency has warned that AI-powered ransomware is likely to target critical infrastructure by 2028.
Part of Multiple zero-day vulnerabilities disclosed+3 related reports
Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether BeyondTrust Remote Support is in your estate.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
Part of Google Chromium Use-After-Free Vulnerabilities+5 related reports
Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage.
Next step: Confirm whether Google Chrome is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Part of The Node2Shell disclosure+22 related reports
Google Brotli Unchecked Return Value Vulnerability reported, with a confirmed CVE-2026-111497 identifier. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Google Brotli is in your estate.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
Part of Barracuda Networks authentication bypass vulnerability+2 related reports
Check whether your organisation or a supplier is exposed to the same operation.
A PHP memory corruption vulnerability is reported, involving two CVEs, with one confirmed as exploited in the wild. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether PHP is in your estate.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
Part of BeyondTrust Zero-Day Exploitation+3 related reports
BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alert CSO Online CVE-2026-102764 is confirmed as exploited in the wild (US known-exploited catalogue) CVE-2026-102764 has an…
Next step: Confirm whether BeyondTrust Remote Support is in your estate.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
Part of Japan's SiteGuard WAF flaw exploitation+2 related reports
Security Affairs CVE-2026-106931 is confirmed as exploited in the wild (US known-exploited catalogue) Authoritative catalogues…
Next step: Confirm whether E-guardian Siteguard is in your estate.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
China says UK politicising cybersecurity will not help build mutual trust Modern Ghana.
Part of Multiple Windows and Citrix vulnerabilities disclosed+14 related reports
CVE-2026-94127 has an estimated attack likelihood score of 0.249 (~24.9% estimated chance of exploitation in the next 30 days; 97.9th percentile) as of 2026-10-25.
Next step: Confirm whether F5 BIG-IP Access Policy Manager is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Part of Multiple software vulnerabilities reported+3 related reports
A vulnerability in Cisco Identity Services Engine involves incorrect use of privileged APIs, with a high probability of exploitation. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Cisco Identity Services Engine is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability reported with confirmed exploitation in the wild. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Palo Alto Networks PAN-OS is in your estate.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
A vulnerability in SolarWinds Serv-U has an estimated 43.7% chance of exploitation in the next 30 days according to estimated attack likelihood data. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether SolarWinds Serv-u is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.