Fortinet FortiMail Path Traversal 2026-10-05 75 True Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability 2026-09-30 85 True Citrix NetScaler ADC and NetScaler Gateway Remote Code Execution Zero-Days 2026-09-28 90 True F5 BIG-IP APM OAuth Authorization Server Heap Overflow Leading to Unauthenticated RCE 2026-09-23 90 True Check Point Management Server Directory Traversal Leading to Arbitrary Script Execution 2026-09-23 90 True Cisco Identity Services Engine Authentication Bypass – Actively Exploited 2026-09-17 90 True Cisco Secure Email Gateway SQL Injection – Actively Exploited 2026-09-15 90 True Critical GitLab Path Traversal Vulnerability Allows Unauthenticated Arbitrary File Read 2026-09-11 80 True Check Point Patches Two Critical RCE Bugs in VPN Certificate Handling 2026-09-10 75 True SAP Patches Critical Unauthenticated RCE Bugs 2026-09-09 85 True StyleSmuggler (CVE-2026-75650): Magento, Adobe Commerce Affected by 0-day RCE 2026-09-08 90 True Beyond Lazarus: Organization of DPRK Cyber Capabilities 2026-09-07 90 True Three Critical ServiceNow Platform Vulnerabilities Could Allow Arbitrary Execution, Privilege Escalation 2026-08-31 80 True Keycloak Credential Reset Authentication Bypass 2026-08-24 75 True VMware Security Advisory CVE-2026-59310 2026-08-21 95 True Inside North Korea’s Cybercrime Ecosystem: Fake IT Workers, Gambling Networks and Malware 2026-08-12 75 True VMware Security Advisory 2026-07-31 80 True Cisco Secure FMC && hard-coded password exploited in Zero-Day attacks 2026-07-30 75 True Kudelski Security Research Center 2026-07-30 90 True Widespread Exploitation of Microsoft SharePoint 2026-07-24 88 True DPRK Fake IT Workers: Inside Their Evolving Network Infrastructure 2026-07-17 85 True How DPRK’s Contagious Interview Campaign Targets Developers 2026-06-30 85 True Klue Supply Chain Compromise and CRM Data Exfiltration Incident Advisory 2026-06-19 75 True Fortinet "FortiBleed" Global Compromise & Active Exploitation of Fortinet Vulnerabilities 2026-06-17 85 True Critical Vulnerabilities in Ivanti Sentry 2026-06-10 90 True Check Point VPN Authentication Bypass Under Active Exploitation 2026-06-08 85 True Windows Netlogon stack buffer overflow 2026-06-02 90 True Ivanti EPMM CVE-2026-6973 Allows RCE with Admin Credentials, Under Active Exploitation 2026-05-07 78 True Widespread DAEMON Tools Supply Chain Attack Enables Targeted Follow-on 2026-05-05 85 True Linux CVE-2026-31431 "Copy Fail" LPE Enables Stealthy Root Access, Container Escape 2026-05-01 75 True FortiClientEMS 7.4.4: Critical SQL Injection Flaw Exploited in the Wild 2026-04-28 85 True Critical Vulnerability in Fortinet FortiClient EMS 2026-04-07 90 True F5 BigIP APM: Remote Code Execution 2026-03-30 90 True Investigating Two Variants of the Trivy Supply-Chain Compromise 2026-03-27 90 True Critical Vulnerabilities in Citrix NetScaler ADC and Gateway 2026-03-25 75 True Trivy Tag Compromise Supply Chain Attack 2026-03-23 85 True Unauthenticated Remote Code Execution in Oracle Identity Manager and Web Services Manager 2026-03-23 90 True Inside the Cyber Infrastructure Behind DPRK Fake IT Worker Operations 2026-03-23 78 True CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability.md 2026-02-26 90 True DPRK Fake IT Workers Fraud Playbook 2026-02-24 75 True GNU telnetd auth bypass CVE-2026-24061 2026-01-30 85 True CVE-2026-1281 and CVE-2026-1340 Affecting Ivanti Endpoint Manager Mobile (EPMM) 2026-01-30 75 True Heap-Based Buffer Overflow in Fortinet Products 2026-01-15 85 True Inside the DPRK Fake IT Workers Network: IP Ranges, Proxies, and Internal Coordination 2026-01-05 78 True Kudelski Security Research Center 2025-12-29 85 True Fortinet FortiCloud SSO Authentication Bypass Vulnerabilities Actively Exploited (CVE-2025-59718, CVE-2025-59719) 2025-12-18 80 True Critical Security Vulnerability in React Server Components (CVE-2025-55182) 2025-12-04 92 True UPDATE: Critical Security Vulnerability in React Server Components (CVE-2025-55182) 2025-12-04 90 True Critical Vulnerabilities in Oracle E-Business Suite Marketing Administration 2025-10-24 90 True F5 Security Incident 2025-10-16 85 True