Threats tagged 'cisa-kev'

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

CVE-2026-63030 is a critical vulnerability in WordPress Core involving an interpretation conflict that enables attackers to perform SQL Injection and potentially achieve Remote Code Execution. It can be chained with another vulnerability, CVE-2026-60137, to escalate impact. The vulnerability has a high CVSS score of 9.8 and is known to be exploited in the wild.

DD-WRT contains a stack-based buffer overflow vulnerability in its UPnP implementation that allows unauthenticated attackers to overflow an internal buffer and potentially execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patches are provided in the available data.

CVE-2026-0770 is a critical vulnerability in Langflow that allows remote attackers to execute arbitrary code by including functionality from an untrusted control sphere. This vulnerability has a CVSS score of 9.8, indicating a high severity with network attack vector, no required privileges or user interaction, and impacts confidentiality, integrity, and availability. It is known to be exploited in the wild. No specific affected versions or patches are currently provided.

Er zijn twee kwetsbaarheden verholpen in WordPress Core 6.8.6, 6.9.5 en 7.0.2

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

CVE-2026-9586 is a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997). The vulnerability exists in the /pa endpoint, which processes XML content starting with <PolycomIPPhone> and unsafely concatenates the user-controlled PhoneIP value into PostgreSQL queries. This allows remote attackers to execute arbitrary SQL commands, potentially leading to database compromise and remote code execution.

CVE-2023-4346 is a vulnerability in the KNX Association's KNX Protocol Connection Authorization Option 1, involving an overly restrictive account lockout mechanism. This flaw could allow an attacker to purge all devices that do not have additional security options enabled and set a BCU key to lock the device. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.

CVE-2026-15409 is a critical Server-Side Request Forgery (SSRF) vulnerability in the SonicWall SMA1000 Appliance Work Place interface. It allows a remote unauthenticated attacker to cause the appliance to make requests to unintended locations. The vulnerability affects specific versions of SMA1000 firmware. Exploitation can lead to complete compromise of confidentiality, integrity, and availability. Known exploits and ransomware campaigns have been reported leveraging this vulnerability.

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

Cisco IOS 12.4 contains multiple cross-site request forgery (CSRF) vulnerabilities that allow remote attackers to execute arbitrary commands by exploiting specific URIs related to privilege and configuration commands. These vulnerabilities enable unauthorized command execution via crafted HTTP requests targeting the device's web interface.

CVE-2025-5777, known as CitrixBleed 2, is a memory-overread vulnerability in Citrix NetScaler ADC and Gateway appliances. It allows attackers to send malformed pre-authentication login requests that leak memory containing valid session tokens, enabling session hijacking and bypass of multi-factor authentication. Exploitation leads to privilege escalation via a registry-symlink technique targeting the AppMgmt service, creation of rogue administrator accounts, and persistence through legitimate remote access tools. The vulnerability has been actively exploited in multiple unrelated organizations, culminating in deployment of DragonForce ransomware in the most severe cases. The attack chain is highly standardized, indicating a single initial access broker. The vulnerability is listed in the CISA KEV catalog and public exploit code is available. Patch status is not confirmed in the provided data.

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.