#CISA KEV
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock CISA's latest Known Exploited Vulnerabilities update is not just another list of...
Lucas Oliveira
Research
Citrix NetScaler CVE-2026-8452 is now a KEV patch priority
Citrix NetScaler CVE-2026-8452 is now a KEV patch priority Executive Summary CISA's latest Known Exploited Vulnerabilities update has turned CVE-2026-8452 from...
Lucas Oliveira
Research
Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident
Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident Self-hosted source control is rarely treated like an internet-facing edge appliance,...
Lucas Oliveira
Research
CISA Adds Oracle WebLogic Proxy Plug-in Flaw to KEV as Exploitation Pressure Rises
CISA Adds Oracle WebLogic Proxy Plug-in Flaw to KEV as Exploitation Pressure Rises CISA has added CVE-2026-21962, a maximum-severity Oracle HTTP Server and Orac...
Lucas Oliveira
Research
CISA Warns of Active Exploitation in Zimbra Collaboration Suite
CISA Warns of Active Exploitation in Zimbra Collaboration Suite CISA has added CVE-2026-73570, an operating-system command injection flaw in Zimbra Collaboratio...
Lucas Oliveira
Research
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide | 2026 Executive Summary Since August 18, 2026, the critical CVE-2026-33824 vulnerability in Microsof...
Lucas Oliveira
Research
Cisco FMC Static Credential Flaw Lands in KEV After Active Exploitation
Cisco FMC Static Credential Flaw Lands in KEV After Active Exploitation Cisco has released hot fixes for CVE-2026-20316, a static credential [vulnerability](htt...
Lucas Oliveira
Research
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius Arista's July 27 advisory on CVE-2026-16812 deserves immediate attention because the aff...
Lucas Oliveira
Research
SharePoint RCE zero-day forces a July 19 incident-response deadline
SharePoint RCE zero-day forces a July 19 incident-response deadline Microsoft SharePoint Server administrators have another urgent on-premises exposure to handl...
Lucas Oliveira
Research
Oracle E-Business Suite flaw hits CISA KEV as payment systems face takeover risk
Oracle E-Business Suite flaw hits CISA KEV as payment systems face takeover risk CISA has added CVE-2026-46817, a critical Oracle E-Business Suite vulnerability...
Lucas Oliveira
Research
FortiSandbox command injection flaws move from patch queue to exploited risk
FortiSandbox command injection flaws move from patch queue to exploited risk CISA has added two Fortinet FortiSandbox vulnerabilities to its Known Exploited Vul...
Lucas Oliveira
Research
Exploited SonicWall SMA zero-days put remote access gateways on the clock
Exploited SonicWall SMA zero-days put remote access gateways on the clock SonicWall has released urgent fixes for two exploited zero-day vulnerabilities in its...
Lucas Oliveira
Research