A single Cisco advisory bundles seven internally-found IOS XR flaws by weakness class, two of them unauthenticated and remotely exploitable for full device compromise, with fixes spread across dozens of per-train SMUs.
Every CISA KEV addition, plus critical-severity flaws in the kit that sits at the edge of a network: firewalls, VPN gateways, load balancers, routers, switches and management consoles.
Colour on the left of each entry is the CVSS severity. A pink CISA KEV badge means the flaw is being exploited right now — treat those first, whatever the score says. How each post is sourced and checked is set out in the methodology.
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
A flaw in ScreenConnect client software lets an attacker inside an active remote support session push files to the host and run them without the usual confirmation prompt.
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing …
JFrog Artifactory Improper Authentication Vulnerability
Artifactory can hand an unauthenticated caller a valid anonymous-user token even after anonymous access has been switched off, letting anyone who can reach it read sensitive artefacts.
JFrog Artifactory Incorrect Authorization Vulnerability
Artifactory checks a token’s signature and issuer but not its scope, letting a low-privilege token holder escalate to actions the token was never meant to permit.
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
A crafted username at the RouterOS SSH prompt lets an unauthenticated attacker rewrite the router’s permission mask and take full control, with no credentials needed.
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik’s bandwidth-test service accepts a related connection before login finishes, letting an unauthenticated network client leak kernel memory or crash the router’s kernel.
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
An unauthenticated attacker can send crafted HTTP requests to Cisco Firewall Management Center’s web interface and gain root on the underlying host, no login needed.
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
An unauthenticated attacker reaching a NetScaler AAA virtual server or Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) can walk straight past the login step, and CISA confirms this is already being exploited.
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
A network-reachable heap overflow in FortiOS, FortiSwitchManager and FortiSASE lets unauthenticated attackers send crafted packets to run unauthorised code, and it’s already known to be exploited.