#cves
- News · Sep 11, 2026Two Cisco FMC flaws are being used to harvest credentials and to land Qilin ransomware
CVE-2026-20079 (CVSS 10.0) gives unauthenticated root on Cisco Secure Firewall Management Center, used to deploy web shells that query internal databases for credentials. A second flaw, CVE-2026-20316, is Qilin's way in.
- News · Sep 9, 2026N-able shipped a fourth N-central hotfix in five weeks, and CVSS 10.0 was already exploited
CVE-2026-86218 is a static code injection giving pre-auth RCE on N-central, scoring 10.0 and exploited in the wild. Huntress found a compromised customer on September 4; CISA set a federal deadline of September 11.
- News · Sep 8, 2026A FreeIPA flaw chain let an anonymous client write itself a reusable administrator credential
CVE-2026-76578 (CVSS 9.8) chains with a 389 Directory Server ownership-check bug so an unauthenticated client can create an OTP token entry, pass the ownership check by being nobody, and write a Kerberos identity and password beside it.
- News · Sep 1, 2026A phantom join key let anyone mint JFrog Artifactory admin tokens, and exploitation started in days
CVE-2026-82329 (CVSS 9.8) is an authentication bypass in JFrog Access. Instances without an explicit join key got a predictable one, letting an unauthenticated attacker forge access and mint administrator credentials. Exploited from September 1.
- News · Aug 24, 2026Keycloak password reset flaw let anyone skip the email token and take over any account
CVE-2026-18963 is improper state validation in Keycloak's reset-credentials flow. A crafted request jumped the authentication session straight to the password-update step, no verification token needed. CVSS 9.1, fixed in 26.7.2.
- News · Aug 21, 2026Microsoft patched a CVSS 10.0 Entra ID flaw, then corrected the exploitation flag from yes to no
CVE-2026-69836 was an unauthenticated deserialization flaw in Entra ID scoring a perfect 10.0. Microsoft fixed it service-side with no customer action, but first published it marked as exploited, then reversed that a day later.
- News · Aug 19, 2026NetScaler ships a critical authentication bypass affecting Gateway and AAA virtual servers
CVE-2026-19490 (CVSS 9.3) bypasses authentication on NetScaler ADC and Gateway appliances running a Gateway or AAA virtual server, with a SAML action configured on current builds. Fixed in 14.1-73.32 and 13.1-63.21.