BeyondTrust Remote Support fails to check where internal messages actually come from, letting an unauthenticated attacker over the network trick the appliance into performing file operations on itself.
Every CISA KEV addition, plus critical-severity flaws in the kit that sits at the edge of a network: firewalls, VPN gateways, load balancers, routers, switches and management consoles.
Colour on the left of each entry is the CVSS severity. A pink CISA KEV badge means the flaw is being exploited right now — treat those first, whatever the score says. How each post is sourced and checked is set out in the methodology.
Fortinet Multiple Products Path Traversal Vulnerability
FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or …
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
An unauthenticated attacker who already knows a file’s exact path can pull it straight out of the web root on eight Atlassian Data Center products, with active exploitation already confirmed.
Ahsay AhsayCBS Command Injection Vulnerability
Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver …
Ahsay AhsayCBS Improper Authentication Vulnerability
Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd …
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
A path traversal bug in Cisco Secure Email Gateway’s attachment-scanning feature lets an attacker email a crafted file to the gateway and gain root on the underlying OS without logging in.
Palo Alto Networks PAN-OS Code Injection Vulnerability
An authenticated attacker who can reach the PAN-OS management interface can inject code that runs as root on PA-Series, VM-Series, or Panorama firewalls, and the flaw is already being exploited.
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
An unauthenticated attacker can spoof the login check on Ivanti Connect Secure and run arbitrary commands on the gateway, with no credentials or user interaction required, and it’s already being exploited.
Microsoft Windows Command Injection Vulnerability
A command injection flaw in Windows Shell lets an attacker who tricks a user into opening a crafted file or link bypass a security feature, with full confidentiality, integrity and availability impact — and it’s already being exploited.
Apache Struts Command Injection Vulnerability
A long-standing flaw in Apache Struts lets unauthenticated attackers run commands on the server by abusing the method: prefix when Dynamic Method Invocation is switched on.