Tag

#cisa-kev

12 posts0 followers

Explore Hashnode

Alternatives

UnrealIRCd CVE-2026-114713: Users Inject Server Commands

On an UnrealIRCd network with two or more linked servers, any connected user can make a server run commands with server authority. The flaw is UnrealIRCd CVE-2026-114713, an escaping bug in the IRCv3

11 min read404-founders.com

Vũ Nhật LâmOct 6

MikroTrick: Two SSH Bugs Chained into Passwordless Admin on RouterOS

Summary MikroTrick is CERT Polska's name for a two-vulnerability chain in RouterOS that gives an attacker full access to the administrative console with no password and no SSH key. Two things make thi

9 min readblog.fiscybersec.com

404 FoundersSep 5

Cyber Alert: LiteLLM CVE-2026-59822 Lets an Arbitrary Bearer Token Reach MCP Tools

CVE-2026-59822 lets an arbitrary Bearer token bypass LiteLLM MCP authentication and reach configured tools. Upgrade to LiteLLM 1.84.0 or later.

4 min read404-founders.com

404 FoundersSep 5

Cyber Alert: Kestra CVE-2026-49869 Gives Unauthenticated Attackers Root RCE in the Worker Container

CVE-2026-49869 lets unauthenticated attackers bypass Kestra authentication and execute workflows as root in the worker container. Upgrade to 1.0.45 or 1.3.21+.

5 min read404-founders.com

404 FoundersAug 25

Cisco CVE-2026-20349 Turns the VPN Edge Into the Target

CVE-2026-20349 does not need credentials or a click. A crafted HTTP request can reload an exposed ASA or FTD VPN gateway, and CISA says attackers are already using it.

3 min read404-founders.com

Vũ Nhật LâmAug 20

Storm-1175, StormEncryptor and CVE-2026-18577: When the Patch Closes the Door and the Attacker Is Already Inside

Risk Summary CVE-2026-18577 was disclosed on 2 August 2026. That same day, Microsoft Threat Intelligence observed Storm-1175 begin deploying a previously undocumented ransomware family: StormEncryptor

18 min readblog.fiscybersec.com

404 FoundersAug 20

CISA Adds Windows IKE RCE CVE-2026-33824 to KEV After Active Exploitation

The 9.8-rated pre-auth flaw sits on UDP/500 and can hand an attacker LocalSystem code execution on exposed IKEv2 responders.

4 min read404-founders.com

Virusis BlogApr 26

26/04/2026 Cyber Security Briefly News - Critical Threat Convergence: Exploited Vulnerabilities, Supply Chain Risks, and Evolving APT Tactics

⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros

6 min readblog.virusis.com

Virusis BlogApr 21

21/04/2026 Cyber Security Briefly News - Escalating AI Security Risks & Active Exploitation Define Today's Threat Landscape

⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros

5 min readblog.virusis.com

Virusis BlogMar 19

19/03/2026 Cyber Security Briefly News - Proactive AI Defense and Critical Vulnerability Exploitation Drive Urgent Security Mandates

⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros

6 min readblog.virusis.com

Search Hashnode

Explore Hashnode

Trending tags this week

UnrealIRCd CVE-2026-114713: Users Inject Server Commands

MikroTrick: Two SSH Bugs Chained into Passwordless Admin on RouterOS

Cyber Alert: LiteLLM CVE-2026-59822 Lets an Arbitrary Bearer Token Reach MCP Tools

Cyber Alert: Kestra CVE-2026-49869 Gives Unauthenticated Attackers Root RCE in the Worker Container

Cisco CVE-2026-20349 Turns the VPN Edge Into the Target

Storm-1175, StormEncryptor and CVE-2026-18577: When the Patch Closes the Door and the Attacker Is Already Inside

CISA Adds Windows IKE RCE CVE-2026-33824 to KEV After Active Exploitation

26/04/2026 Cyber Security Briefly News - Critical Threat Convergence: Exploited Vulnerabilities, Supply Chain Risks, and Evolving APT Tactics

21/04/2026 Cyber Security Briefly News - Escalating AI Security Risks & Active Exploitation Define Today's Threat Landscape

19/03/2026 Cyber Security Briefly News - Proactive AI Defense and Critical Vulnerability Exploitation Drive Urgent Security Mandates