attackers are exploiting to remotely crash vulnerable firewall devices. Tracked as CVE-2026-76418, this high-severity...configurations containing the 'webvpn' keyword and SSL VPN enabled on at least one interface. Cisco advised customers to patch vulnerable firewalls after its Product Security Incident…
In this guide, I'll show you how, using a FortiGate 40F and SSL VPN, configured entirely from the command line. Every...copy, review and keep in version control. Heads up: SSL VPN was removed from FortiOS 7.6.3 and later on lower-end models…
Attackers chained three zero-day flaws in Ivanti Connect Secure VPN appliances to gain root-level access without logging...suspicious activity at a customer and worked with Ivanti to examine the affected device. The security firm...authentication bypass and a file-write…
recovery keys. Volexity began working closely with Ivanti as soon as it suspected a vulnerability chain....Monitoring customer. Initial work identified an ICS VPN appliance as the root cause, and subsequent checks confirmed that the ICS VPN appliance was fully…
disrupts systems at Hobbs and Whistles retailers Ivanti urged customers on Tuesday to immediately patch...actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. Formerly known as Pulse Connect Secure and originally Juniper Pulse, the enterprise-grade…
Defenders who relied on Ivanti's September batch bulletin remain vulnerable to an actively...CVE-2026-104935 record documents a vulnerability in Ivanti Connect Secure that lets a remote, unauthenticated attacker execute arbitrary commands on the VPN appliance without providing credentials. CISA…
while investigating an incident involving an ICS VPN appliance. The investigation showed that the actor deployed...tampering. Organizations should immediately upgrade Ivanti Connect Secure to version 22.8R2.5 or later, or transition...for signs of compromise. Depending solely on the Ivanti Integrity…
Ivanti disclosed CVE-2026-104935 on October 13, 2026, and confirmed the flaw is already exploited in the wild. The Ivanti Connect Secure vulnerability lets a remote, unauthenticated...commands. Fixed versions are available now. Connect Secure is a VPN gateway that sits at the…
high-severity remote code execution flaw in the PAN-OS management interface. Tracked as CVE-2026-0322,...run arbitrary code with root privileges on the firewall. The flaw is a code injection weakness (CWE-94, CAPEC-242) in the PAN-OS management interface. It affects PAN-OS on…
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told...Volexity. Volexity,…
Firewall, VPN gateway and edge-device vulnerabilities from Fortinet, Palo Alto, Cisco and Ivanti, network detection and DDoS protection.
An article joins this feed when it matches these terms. Each one is also a search of its own.