Security Advisories
Disclosure bulletins
Dated advisories from research and client engagements — severity, affected products, technical root cause, and remediation guidance, published under coordinated disclosure.
49 advisories published
Chaining WordPress Core SQL Injection (CVE-2026-60137) to Achieve RCE
Learn how the WordPress Core SQL injection vulnerability (CVE-2026-60137) chains with CVE-2026-63030 to allow unauthenticated remote code execution.
Critical Fortinet FortiSandbox OS Command Injection Under Active Exploitation…
An unauthenticated OS command injection vulnerability in Fortinet FortiSandbox (CVE-2026-39808) poses critical risk, allowing unauthorized code execution via…
Critical OS Command Injection in FortiSandbox: Immediate Action Required
A critical unauthenticated OS command injection vulnerability (CVE-2026-25089) in Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS allows…
Critical SharePoint RCE (CVE-2026-58644) Actively Exploited – Immediate Action Required
A critical deserialization vulnerability (CVE-2026-58644) in Microsoft SharePoint Server is under active exploitation, enabling unauthenticated remote code…
Advisory: Critical KNX Protocol Lockout Vulnerability (CVE-2023-4346)
An overly restrictive account lockout mechanism in KNX Protocol Connection Authorization Option 1 allows attackers to purge devices and lock them.
Advisory: Critical Code Injection in SonicWall SMA1000 Appliances
A code injection vulnerability (CVE-2026-15410) in SonicWall SMA1000 appliances could allow remote authenticated administrators to execute OS commands.
Critical SonicWall SMA1000 SSRF Demands Immediate Action
A critical server-side request forgery vulnerability (CVE-2026-15409) in SonicWall SMA1000 Appliances requires immediate mitigation to prevent potential…
Urgent Advisory: SharePoint Zero-Day Under Active Exploitation - CVE-2026-56164
An actively exploited missing authentication vulnerability (CVE-2026-56164) in Microsoft SharePoint Server allows unauthenticated privilege elevation,…
Urgent: Actively Exploited Microsoft ADFS Privilege Elevation Vulnerability…
An actively exploited zero-day privilege elevation vulnerability in Microsoft Active Directory Federation Services (CVE-2026-56155) demands immediate patching…
Advisory: Critical Cisco IOS CSRF Vulnerability (CVE-2008-4128) Actively Exploited
CISA warns of active exploitation of CVE-2008-4128, a critical Cross-Site Request Forgery vulnerability in Cisco IOS 12.4, by state-sponsored actors.
No advisories match your search.