Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)
View CSAF Summary Schneider Electric is aware of a vulnerability in the following products: The Easergy C5 is a scalable and interoperable bay controller, pr...
advisories
20 articles
Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)
[This is a Guest Diary by Frank Igbokwe, an ISC intern as part of the SANS.
ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd)
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
Metabase 0.61.
[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
FreePBX 17.0.
Cisco IOS XR Software Security Hardening Release: September 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive int...
Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthent...
Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root...
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Pr...
Communicating Under Pressure: Best Practices for Service Providers
Developed by CISA, the Federal Bureau of Investigation, and international partners, this guidance describes how organizations can plan and execute clear, tim...
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)
[webapps] PodcastGenerator 3.2.9 - Stored XSS
PodcastGenerator 3.2.
[webapps] Ghost_CMS 6.19.0 - Remote Code Execution
Ghost_CMS 6.19.
[webapps] Langflow 1.10.0 - RCE
Langflow 1.10.
[hardware] Fullhan FH8626V100 - Multiple Vulnerabilities
Fullhan FH8626V100 - Multiple Vulnerabilities
[webapps] Marimo 0.20.4 - RCE
Marimo 0.20.
[dos] EVerest 2025.9.0 - DoS
EVerest 2025.9.
[webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
Bludit CMS 3.20.
Rockwell Automation RSLinx Classic
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the affected product. Th...