--- title: "#cisa-kev articles | Hashnode" description: "Explore 12 articles tagged #cisa-kev on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/cisa-kev" --- Tag # #cisa-kev 12 posts · 0 followers [404 Founders](https://hashnode.com/@404-founders) · [12h ago](https://hashnode.com/posts/alert-unrealircd-cve-2026-114713-label-tag-injection/6af9b45d2d65f967c9e6f216) ### [UnrealIRCd CVE-2026-114713: Users Inject Server Commands](https://404-founders.com/blog/alert-unrealircd-cve-2026-114713-label-tag-injection?utm_source=hashnode&utm_medium=feed) On an UnrealIRCd network with two or more linked servers, any connected user can make a server run commands with server authority. The flaw is UnrealIRCd CVE-2026-114713, an escaping bug in the IRCv3 11 min read · [404-founders.com](https://404-founders.com/blog/alert-unrealircd-cve-2026-114713-label-tag-injection?utm_source=hashnode&utm_medium=feed) [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Oct 6](https://hashnode.com/posts/mikrotrick-routeros-ssh-chain-en/6ac4a0be598ea8dfb7fce8f8) ### [MikroTrick: Two SSH Bugs Chained into Passwordless Admin on RouterOS](https://blog.fiscybersec.com/mikrotrick-routeros-ssh-chain-en?utm_source=hashnode&utm_medium=feed) Summary MikroTrick is CERT Polska's name for a two-vulnerability chain in RouterOS that gives an attacker full access to the administrative console with no password and no SSH key. Two things make thi 9 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/mikrotrick-routeros-ssh-chain-en?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Sep 5](https://hashnode.com/posts/litellm-cve-2026-59822-mcp-auth-bypass-upgrade-184/6a9c6fb950fbea0e90c09116) ### [Cyber Alert: LiteLLM CVE-2026-59822 Lets an Arbitrary Bearer Token Reach MCP Tools](https://404-founders.com/blog/litellm-cve-2026-59822-mcp-auth-bypass-upgrade-184?utm_source=hashnode&utm_medium=feed) CVE-2026-59822 lets an arbitrary Bearer token bypass LiteLLM MCP authentication and reach configured tools. Upgrade to LiteLLM 1.84.0 or later. 4 min read · [404-founders.com](https://404-founders.com/blog/litellm-cve-2026-59822-mcp-auth-bypass-upgrade-184?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Sep 5](https://hashnode.com/posts/kestra-cve-2026-49869-path-bypass-rce-patch-sep5/6a9c6d2cfc907d56b9c0b1cb) ### [Cyber Alert: Kestra CVE-2026-49869 Gives Unauthenticated Attackers Root RCE in the Worker Container](https://404-founders.com/blog/kestra-cve-2026-49869-path-bypass-rce-patch-sep5?utm_source=hashnode&utm_medium=feed) CVE-2026-49869 lets unauthenticated attackers bypass Kestra authentication and execute workflows as root in the worker container. Upgrade to 1.0.45 or 1.3.21+. 5 min read · [404-founders.com](https://404-founders.com/blog/kestra-cve-2026-49869-path-bypass-rce-patch-sep5?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Aug 25](https://hashnode.com/posts/cisco-cve-2026-20349-vpn-edge-target/6a8e59e591ca36684cb38c2b) ### [Cisco CVE-2026-20349 Turns the VPN Edge Into the Target](https://404-founders.com/blog/cisco-cve-2026-20349-vpn-edge-target?utm_source=hashnode&utm_medium=feed) CVE-2026-20349 does not need credentials or a click. A crafted HTTP request can reload an exposed ASA or FTD VPN gateway, and CISA says attackers are already using it. 3 min read · [404-founders.com](https://404-founders.com/blog/cisco-cve-2026-20349-vpn-edge-target?utm_source=hashnode&utm_medium=feed) [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Aug 20](https://hashnode.com/posts/storm-1175-stormencryptor-n-central-cve-2026-18577-en/6a86c66f41cb3efb3b10093b) ### [Storm-1175, StormEncryptor and CVE-2026-18577: When the Patch Closes the Door and the Attacker Is Already Inside](https://blog.fiscybersec.com/storm-1175-stormencryptor-n-central-cve-2026-18577-en?utm_source=hashnode&utm_medium=feed) Risk Summary CVE-2026-18577 was disclosed on 2 August 2026. That same day, Microsoft Threat Intelligence observed Storm-1175 begin deploying a previously undocumented ransomware family: StormEncryptor 18 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/storm-1175-stormencryptor-n-central-cve-2026-18577-en?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Aug 20](https://hashnode.com/posts/cisa-windows-ike-rce-cve-2026-33824-kev-active-exploitation/6a872e7a8fefcf7a6bb9df4f) ### [CISA Adds Windows IKE RCE CVE-2026-33824 to KEV After Active Exploitation](https://404-founders.com/blog/cisa-windows-ike-rce-cve-2026-33824-kev-active-exploitation?utm_source=hashnode&utm_medium=feed) The 9.8-rated pre-auth flaw sits on UDP/500 and can hand an attacker LocalSystem code execution on exposed IKEv2 responders. 4 min read · [404-founders.com](https://404-founders.com/blog/cisa-windows-ike-rce-cve-2026-33824-kev-active-exploitation?utm_source=hashnode&utm_medium=feed) [Virusis Blog](https://hashnode.com/@virusis) · [Apr 26](https://hashnode.com/posts/26042026-cyber-security-briefly-news-critical-threat-convergence-exploited-vulnerabilities-supply-chain-risks-and-evolving-apt-tactics/69edce533122e558311a8c84) ### [26/04/2026 Cyber Security Briefly News - Critical Threat Convergence: Exploited Vulnerabilities, Supply Chain Risks, and Evolving APT Tactics](https://blog.virusis.com/26042026-cyber-security-briefly-news-critical-threat-convergence-exploited-vulnerabilities-supply-chain-risks-and-evolving-apt-tactics?utm_source=hashnode&utm_medium=feed) ⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros 6 min read · [blog.virusis.com](https://blog.virusis.com/26042026-cyber-security-briefly-news-critical-threat-convergence-exploited-vulnerabilities-supply-chain-risks-and-evolving-apt-tactics?utm_source=hashnode&utm_medium=feed) [Virusis Blog](https://hashnode.com/@virusis) · [Apr 21](https://hashnode.com/posts/21042026-cyber-security-briefly-news-escalating-ai-security-risks-active-exploitation-define-todays-threat-landscape/69e736dc38d39165a106f8eb) ### [21/04/2026 Cyber Security Briefly News - Escalating AI Security Risks & Active Exploitation Define Today's Threat Landscape](https://blog.virusis.com/21042026-cyber-security-briefly-news-escalating-ai-security-risks-active-exploitation-define-todays-threat-landscape?utm_source=hashnode&utm_medium=feed) ⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros 5 min read · [blog.virusis.com](https://blog.virusis.com/21042026-cyber-security-briefly-news-escalating-ai-security-risks-active-exploitation-define-todays-threat-landscape?utm_source=hashnode&utm_medium=feed) [Virusis Blog](https://hashnode.com/@virusis) · [Mar 19](https://hashnode.com/posts/19032026-cyber-security-briefly-news-proactive-ai-defense-and-critical-vulnerability-exploitation-drive-urgent-security-mandates/69bbb5758eca0857bd83d23d) ### [19/03/2026 Cyber Security Briefly News - Proactive AI Defense and Critical Vulnerability Exploitation Drive Urgent Security Mandates](https://blog.virusis.com/19032026-cyber-security-briefly-news-proactive-ai-defense-and-critical-vulnerability-exploitation-drive-urgent-security-mandates?utm_source=hashnode&utm_medium=feed) ⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros 6 min read · [blog.virusis.com](https://blog.virusis.com/19032026-cyber-security-briefly-news-proactive-ai-defense-and-critical-vulnerability-exploitation-drive-urgent-security-mandates?utm_source=hashnode&utm_medium=feed)