customers that it has released patches for a PAN-OS zero-day vulnerability exploited in malicious attacks. The high-severity flaw is tracked as CVE-2026-0322 and it allows remote code execution. It affects the management interface of...authenticated attacker with network access to…
Ivanti has disclosed CVE-2026-104935, a high-severity vulnerability in Ivanti Connect Secure...exploited in real-world attacks. The flaw carries a CVSS score of 8.6 and enables unauthenticated attackers...threat actor, tracked as UTA0576, chained the authentication bypass and remote code execution covered by…
2026. Security where your customers need it Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)...second call in the DWR request for the AbCommonResources-getDataRecords workflow. The afm_users table can
compromise after attackers exploited a newly disclosed zero-day vulnerability. On Tuesday, Ivanti released updates for Connect Secure (ICS) to fix CVE-2026-104935, an authentication bypass flaw discovered by Volexity. Rated 8.6 on the CVSS scale, it allows remote, unauthenticated attackers...vulnerabilities. Tuesday's…
from unsafe request rewriting and proxy handling. CVE-2024-38475, rated important, affects mod_rewrite...directly reachable. Depending on the exposed resource and application configuration, the flaw can result in local source-code disclosure or code execution. Apache fixed the issue in…
shipped emergency patches for two critical remote code execution vulnerabilities — CVE-2026-109618 and CVE-2026-109619 — collectively named PHP2Shell. With a CVSS v4.0 score of 9.2, they affect every PHP version...Read the full version with charts and embedded sources on ComputeLeap → PHP2Shell comprises four…
SOCRadar threat intelligence to customers worldwide. CVE-2026-104935 covers the first two links in the chain: an authentication bypass and a remote code execution flaw. The third, a privilege escalation flaw, has no CVE and no patch yet. Ivanti
Rescana Ivanti Connect Secure Zero-Day Exploit Chain Enables Root-Level RCE and Credential Theft on Fully Patched VPN Appliances A sophisticated zero-day exploit chain targeting Ivanti Connect Secure...unauthenticated attackers to achieve root-level remote code execution (RCE) on fully patched devices.
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges. Ivanti on Tuesday warned customers that a zero-day vulnerability in its Connect Secure (ICS) VPN...appliances has been exploited in the wild.
(MFT) platform. Several of the flaws allow authentication bypass, session hijacking and administrative control....bulletin text provided. The two highest-rated flaws, CVE-2026-89067 and CVE-2026-87093, both score 8.8. The first lets an attacker...involves incorrect permissions on a critical resource, which…
Newly disclosed critical vulnerabilities and zero-days: CVE write-ups, proof-of-concept exploits, remote code execution and CVSS 9 and above bugs in widely used software.
An article joins this feed when it matches these terms. Each one is also a search of its own.