“CISA”

Active exploitation of PAN-OS auth bypass CVE-2026-0257. Exploit can enable remote access without authentication; prioritize patching and access control.

Active exploitation of FortiClient EMS; apply hotfixes and verify endpoint integrity to prevent credential theft.

SQL injection vulnerability in Drupal actively exploited; federal guidance to patch promptly.

Apex One on-premise systems are under active exploitation for CVE-2026-34926. Patch immediately to reduce risk.

Microsoft issues mitigations for a high-severity Exchange Server zero-day (CVE-2026-42897) exploited in the wild. Install mitigations promptly.

CVE-2026-6973 exploited in targeted attacks; patches released to mitigate. Immediate patching recommended.

Ivanti Endpoint Manager Mobile 0-day vulnerabilities are being exploited; patch on-premises deployments immediately.

Technical PoC publicly released for CVE-2026-41940; vast exploitation activity observed in wild, enabling pre-authentication access and server compromise.

Two actively exploited SimpleHelp remote-support flaws pose direct access risks to networks.

State-sponsored actors chain CVEs to backdoor FXOS/ASA devices; FIRESTARTER persists after patches.

Zero-Day in Microsoft Defender exploited to access SAM and NTLM hashes; patch available. Review Windows security posture and apply the patch promptly.

SD-WAN vulnerabilities being exploited; patch cadence and network segmentation remain critical.

Remote code execution CVE-2026-34197 exploited in the wild; upgrade and rotate credentials advised.

Adobe fixed 55 vulnerabilities across 11 products; critical ColdFusion flaws flagged as high risk for exploitation. Prioritize updates in coordinated patch cycles.

Adobe fixed 55 vulnerabilities across 11 products; critical ColdFusion flaws flagged as high risk for exploitation. Prioritize updates in coordinated patch cycles.