An unauthenticated attacker can abuse a directory traversal flaw in Check Point’s management servers and SmartEvent to upload and run arbitrary scripts, with no login or user action required.
Every CISA KEV addition, plus critical-severity flaws in the kit that sits at the edge of a network: firewalls, VPN gateways, load balancers, routers, switches and management consoles.
Colour on the left of each entry is the CVSS severity. A pink CISA KEV badge means the flaw is being exploited right now — treat those first, whatever the score says. How each post is sourced and checked is set out in the methodology.
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
An unauthenticated, network-reachable heap overflow in BIG-IP APM lets attackers achieve remote code execution on any virtual server combining an access policy with an OAuth profile.
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute …
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
A logic gap in the Linux kernel’s kTLS receive path lets a zero-length record on the rx_list slip past type checks, corrupting zero-copy and queuing assumptions for later records.
Linux Kernel Out-of-Bounds Write Vulnerability
A bridge firewall rule feature in ebtables’ SNAT target can be tricked into writing an ARP address rewrite straight into unprepared kernel memory, corrupting it.
Linux Kernel Race Condition Vulnerability
A local, low-privileged process can race concurrent writes to the same AF_ALG crypto socket, corrupting kernel state with confidentiality, integrity and availability impact.
Acronis Backup Incorrect Default Permissions Vulnerability
A permissions flaw in Acronis Backup’s cPanel/WHM plugin and Plesk extension lets a local user, such as a hosting customer, escalate to root or admin-level control on shared servers.
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
An unauthenticated attacker can bypass login on Cisco ISE and ISE-PIC’s web management interface and gain access to the device outright, with no patch yet available.
Google Pixel Improper Authorization Vulnerability
A logic flaw in the Pixel cellular modem lets someone with radio-level proximity bypass permission checks and escalate privileges without any user interaction, and it’s already being exploited.
Cisco Secure Email Gateway SQL Injection Vulnerability
An unauthenticated attacker can send a single crafted email to a Cisco Secure Email Gateway and gain root control of the appliance through a SQL injection flaw in its message-parsing logic.