SOC Prime Blog

ID: a386702a-200f-5d8e-a45a-1a90d3aff4e9

STIX ID: identity--a386702a-200f-5d8e-a45a-1a90d3aff4e9

Feed Type: rss

Earliest post: 2025-10-29

Latest post: 2026-10-13

Detection engineering insights, threat hunting guidance, and real-time coverage of emerging threats powered by the SOC Prime community.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

10/14/2026

Title	Date Published ↓	Threat Score	Author	Visible
CVE-2026-97229: Critical GitLab RCE Flaw Enables Unauthenticated Code Execution	2026-10-13	88	SOC Prime Team	True
CVE-2026-107406: Critical NetScaler ADC and Gateway RCE Vulnerability	2026-10-09	80	SOC Prime Team	True
CVE-2026-59346: Critical VMware Workstation and Fusion Flaw Enables Guest-to-Host Code Execution	2026-10-09	70	SOC Prime Team	True
CVE-2025-64393: Critical Veeam Backup & Replication RCE Vulnerability	2026-10-08	75	SOC Prime Team	True
CVE-2026-96940: Microsoft Exchange Vulnerability Allows Unauthorized Mailbox Access	2026-10-06	70	SOC Prime Team	True
CVE-2026-21589: Critical Atlassian Vulnerability Exposes Sensitive Files Across Eight Products	2026-10-06	75	SOC Prime Team	True
CVE-2026-88779: Citrix NetScaler Zero-Day Exploited Against SAML Deployments	2026-10-05	85	SOC Prime Team	True
CVE-2026-104286: Critical FortiMail Zero-Day Exploited for Unauthenticated File Writes	2026-10-05	90	SOC Prime Team	True
CVE-2026-84782: High-Severity OpenSSL DTLS Flaw Exposes Heap Memory and Enables DoS	2026-10-01	70	SOC Prime Team	True
CVE-2026-76504: Critical Cisco SD-WAN Manager Zero-Day Exploited in the Wild	2026-10-01	90	SOC Prime Team	True
CVE-2026-86950: Apple CoreGraphics Zero-Day Linked to Extremely Sophisticated Targeted Attacks	2026-09-29	75	SOC Prime Team	True
CVE-2026-88771 and CVE-2026-88772: Critical Citrix NetScaler Zero-Days Exploited in the Wild	2026-09-28	92	SOC Prime Team	True
CVE-2026-94545: Critical Next.js ImageResponse Flaw Enables Remote Code Execution	2026-09-24	75	SOC Prime Team	True
CVE-2026-87902: Critical WordPress Core Flaw Enables Unauthenticated RCE Under Certain Conditions	2026-09-23	80	SOC Prime Team	True
CVE-2026-94127: Critical F5 BIG-IP APM Zero-Day Exploited for Remote Code Execution	2026-09-23	92	SOC Prime Team	True
CVE-2026-93616: Check Point Management Server Zero-Day Exploited in Targeted Attacks	2026-09-23	92	SOC Prime Team	True
CVE-2026-76460: Critical Cisco ISE Zero-Day Authentication Bypass Exploited in the Wild	2026-09-17	95	SOC Prime Team	True
CVE-2026-87886: Acronis Backup Plugin Privilege Escalation Flaw Exploited in Targeted Attacks	2026-09-17	75	SOC Prime Team	True
CVE-2026-58704: Google Pixel Modem Zero-Day Exploited in Targeted Attacks	2026-09-17	88	SOC Prime Team	True
CVE-2026-76461: Critical Cisco Secure Email Gateway Zero-Day Enables Root RCE	2026-09-15	95	SOC Prime Team	True
CVE-2026-85706: Critical GitLab Path Traversal Flaw Exploited in the Wild	2026-09-14	95	SOC Prime Team	True
CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls	2026-09-10	75	SOC Prime Team	True
CVE-2026-44756: Critical SAP Kernel Flaw Enables Unauthenticated Remote Code Execution	2026-09-09	90	SOC Prime Team	True
CVE-2026-85880 and CVE-2026-81963: Microsoft Patches Two Actively Exploited Windows Zero-Days	2026-09-09	72	SOC Prime Team	True
CVE-2026-87491: Chrome V8 Zero-Day Exploited in the Wild Enables Arbitrary Code Execution	2026-09-09	85	SOC Prime Team	True
CVE-2026-75650: Adobe Patches Actively Exploited Magento Zero-Day Used to Deploy Backdoors	2026-09-08	90	SOC Prime Team	True
CVE-2026-67276: MikroTik RouterOS SSH Zero-Day Exploited in Router Takeover Attacks	2026-09-07	88	SOC Prime Team	True
CVE-2026-20212: Critical Cisco Nexus 9000 Flaw Enables Unauthenticated Root RCE	2026-09-04	80	SOC Prime Team	True
CVE-2026-85046: Actively Exploited Chrome V8 Zero-Day Enables Code Execution	2026-09-04	85	SOC Prime Team	True
CVE-2026-83548 and CVE-2026-83549: SonicWall SMA 1000 Zero-Days Exploited in the Wild	2026-09-03	90	SOC Prime Team	True
CVE-2026-82329: Critical JFrog Artifactory Authentication Bypass Exploited in the Wild	2026-09-02	90	SOC Prime Team	True
CVE-2026-76658: Critical HPE Fabric Composer Flaw Enables Unauthenticated Remote Code Execution	2026-09-02	78	SOC Prime Team	True
CVE-2026-81578: Exploited PaperCut Authentication Bypass Chains to Pre-Auth RCE	2026-09-02	90	SOC Prime Team	True
CVE-2026-60004: Critical Gitea RCE Exploited to Deploy Miner-Like Payloads	2026-08-26	88	SOC Prime Team	True
CVE-2026-19490: Critical Citrix NetScaler Authentication Bypass Exposes Enterprise Gateways	2026-08-20	80	SOC Prime Team	True
CVE-2026-19478: Critical GitLab GraphQL Flaw Enables Unauthenticated Data Modification	2026-08-19	78	SOC Prime Team	True
CVE-2026-15748: Critical Forminator WordPress Flaw Enables Unauthenticated RCE	2026-08-19	85	SOC Prime Team	True
CVE-2026-20349: Actively Exploited Cisco ASA and FTD Flaw Enables Remote DoS	2026-08-12	78	SOC Prime Team	True
CVE-2026-68820: Actively Exploited Windows AFD.sys Zero-Day Enables SYSTEM Privilege Escalation	2026-08-12	88	SOC Prime Team	True
Hugging Face Breach: OpenAI Agent Abused Exposed Credentials Across Four Services	2026-08-07	78	SOC Prime Team	True
CVE-2026-18577: N-able N-central Authentication Bypass Lets Attackers Reach Managed Endpoints	2026-08-04	85	SOC Prime Team	True
CVE-2026-20316: Actively Exploited Cisco FMC Flaw Exposes Sensitive Data	2026-07-30	70	SOC Prime Team	True
CVE-2026-66066: Critical Rails Flaw Exposes Server Files via Image Uploads	2026-07-30	80	SOC Prime Team	True
CVE-2026-47876: Critical VMware ESXi VM Escape Flaw Enables Host Code Execution	2026-07-30	80	SOC Prime Team	True
CVE-2026-14266: 7-Zip Heap Overflow Flaw Can Lead to Remote Code Execution	2026-07-23	65	SOC Prime Team	True
CVE-2026-64600: RefluXFS Linux Kernel Flaw Can Lead to Root Privilege Escalation	2026-07-23	78	SOC Prime Team	True
CVE-2026-42533: Critical NGINX Map Regex Flaw Can Trigger Heap Buffer Overflow and Possible RCE	2026-07-16	60	SOC Prime Team	True
CVE-2026-56164 and CVE-2026-56155: Two Exploited Microsoft Zero-Days Put SharePoint and AD FS at Risk	2026-07-16	85	SOC Prime Team	True
CVE-2026-15410 and CVE-2026-15409: SonicWall SMA 1000 Zero-Days Exploited in the Wild	2026-07-16	90	SOC Prime Team	True
CVE-2026-42530: Critical NGINX HTTP/3 Flaw Can Trigger DoS and Possible RCE	2026-06-19	70	SOC Prime Team	True