Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access
CVEs:
CVE-2026-20182
Indicators of Compromise
1012 articles containing extracted IOCs (CVEs, IPs, hashes, domains, URLs, emails)
CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)
CVEs:
CVE-2026-20182
CVE-2026-20127
Broadcom releases VMware Fusion security update for root access bug
CVEs:
CVE-2026-41702
Critical Quest KACE SMA flaw exploited after 10 months
CVEs:
CVE-2025-32975
Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300)
CVEs:
CVE-2026-46300
CVE-2026-43284
New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation
CVEs:
CVE-2026-46300
NGINX Rift: an 18-year-old flaw in the world’s most deployed web server just came to light
CVEs:
CVE-2026-42945
Critical WordPress Plugin Flaw Allows Unauthorized Access to Websites
CVEs:
CVE-2026-8181
Windows DNS Client Security Flaw Exposes Systems to Remote Code Execution
CVEs:
CVE-2026-41096
Siemens Teamcenter
CVEs:
CVE-2026-33862
CVE-2026-33893
CVE-2024-4367
CISA Adds One Known Exploited Vulnerability to Catalog
CVEs:
CVE-2026-20182
Critical Exim Mailer Flaw Enables Remote Code Execution Attacks
CVEs:
CVE-2026-45185
PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
CVEs:
CVE-2026-44338
Langflow CVE-2026-33017 Exploited to Steal AWS Keys, Deploy NATS Worker
CVEs:
CVE-2026-33017
New Fragnesia Linux flaw lets attackers gain root privileges
CVEs:
CVE-2026-46300
New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption
CVEs:
CVE-2026-46300
MongoDB Security Flaw Enables Arbitrary Code Execution on Vulnerable Systems
CVEs:
CVE-2026-8053
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE
CVEs:
CVE-2026-42945
ISC Stormcast For Thursday, May 14th, 2026 https://isc.sans.edu/podcastdetail/9932, (Thu, May 14th)
Quest KACE SMA flaw CVE-2025-32975: when one unpatched tool opens the door to 60 organizations
CVEs:
CVE-2025-32975