Security Advisories
Disclosure bulletins
Dated advisories from research and client engagements — severity, affected products, technical root cause, and remediation guidance, published under coordinated disclosure.
96 advisories published
Critical SharePoint RCE (CVE-2026-58644) Actively Exploited – Immediate Action Required
A critical deserialization vulnerability (CVE-2026-58644) in Microsoft SharePoint Server is under active exploitation, enabling unauthenticated remote code…
Advisory: Critical KNX Protocol Lockout Vulnerability (CVE-2023-4346)
An overly restrictive account lockout mechanism in KNX Protocol Connection Authorization Option 1 allows attackers to purge devices and lock them.
Advisory: Critical Code Injection in SonicWall SMA1000 Appliances
A code injection vulnerability (CVE-2026-15410) in SonicWall SMA1000 appliances could allow remote authenticated administrators to execute OS commands.
Critical SonicWall SMA1000 SSRF Demands Immediate Action
A critical server-side request forgery vulnerability (CVE-2026-15409) in SonicWall SMA1000 Appliances requires immediate mitigation to prevent potential…
Urgent Advisory: SharePoint Zero-Day Under Active Exploitation - CVE-2026-56164
An actively exploited missing authentication vulnerability (CVE-2026-56164) in Microsoft SharePoint Server allows unauthenticated privilege elevation,…
Urgent: Actively Exploited Microsoft ADFS Privilege Elevation Vulnerability…
An actively exploited zero-day privilege elevation vulnerability in Microsoft Active Directory Federation Services (CVE-2026-56155) demands immediate patching…
Advisory: Critical Cisco IOS CSRF Vulnerability (CVE-2008-4128) Actively Exploited
CISA warns of active exploitation of CVE-2008-4128, a critical Cross-Site Request Forgery vulnerability in Cisco IOS 12.4, by state-sponsored actors.
Critical RCE in iCagenda Joomla Extension Under Active Exploitation
An unrestricted file upload vulnerability (CVE-2026-48939) in iCagenda for Joomla allows unauthenticated remote code execution and is actively exploited.
Critical Balbooa Forms RCE: Unrestricted File Upload Vulnerability
A critical unrestricted file upload vulnerability in Balbooa Forms (CVE-2026-56291) allows unauthenticated RCE, demanding urgent remediation.
CRITICAL ADOBE COLDFUSION RCE (CVE-2026-48282) ACTIVELY EXPLOITED
A critical path traversal vulnerability in Adobe ColdFusion (CVE-2026-48282) is under active exploitation, enabling unauthenticated remote code execution.
No advisories match your search.