Výsledky hledání

SPOJENO PŘES CVE Kritische Sicherheitslücke in Cisco Secure Email Gateway - aktiv ausgenutzt - Updates verfügbar

15. September 2026 Beschreibung In Cisco Secure Email Gateway existiert eine kritische Sicherheitslücke. Bei erfolgreicher Ausnutzung könnte diese Sicherheitslücke es nicht authentifizierten Angreifer:innen aus der Ferne ermöglichen Befehle mit Root-Rechten auf dem zugrunde liegenden Betriebssystem auszuführen. Laut Cisco wurde eine Ausnutzung der Sicherheitslücke bereits beobachtet. CVE-Nummer(n): CVE-2026-76461 CVSS Base Score: 9.8 Auswirkungen Ein Angreifer könnte diese Sicherheitslücke…

KEV ✓ EPSS 0.02 CVSS 9.8 CVE-2026-76461 Cisco veřejná správa AT SE US FI GB FR CA IT

tg: zneužíváno tg: zranitelnost tg: regulace

15. 9. 16:56 · CERT.at · Kritische Sicherheitslücke in Cisco Secure Email Gateway - aktiv ausgenutzt - Updates verfügbar 15. 9. 15:00 · CERT-SE · Kritisk sårbarhet i Cisco Secure Email Gateway utnyttjas aktivt 15. 9. 14:22 · Rapid7 · CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild 15. 9. 04:00 · NCSC-FI · Cisco Secure Email Gateway SQL Injection Vulnerability 15. 9. 02:00 · Sophos Threat Research · Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation 15. 9. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans les produits Cisco (15 septembre 2026) 14. 9. 21:23 · Cyber Centre Kanada · Cisco security advisory (AV26-921) 14. 9. 19:03 · CSIRT Itálie (ACN) · Cisco: sfuttamento in rete della CVE-2026-76461 relativa a Secure Email Gateway 14. 9. 18:00 · Cisco PSIRT · Cisco Secure Email Gateway SQL Injection Vulnerability 14. 9. 14:00 · CISA Advisories · CISA Adds One Known Exploited Vulnerability to Catalog 14. 9. 02:00 · CISA KEV · Cisco Secure Email Gateway SQL Injection Vulnerability (CVE-2026-76461)

SPOJENO PŘES CVE Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]

KEV ✓ EPSS 0.76 CVE-2026-20079 Cisco veřejná správa US

tg: zneužíváno tg: zranitelnost tp: identita

9. 9. 23:40 · BleepingComputer · Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks 9. 9. 02:00 · CISA KEV · Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-20079) 5. 8. 16:37 · Cisco PSIRT · Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel…

KEV ✓ EPSS 0.76 CVE-2025-25249 CVE-2026-19490 CVE-2026-20079 CVE-2026-87491 Fortinet Citrix Google Cisco veřejná správa US

tg: zneužíváno tg: zranitelnost tg: regulace

9. 9. 14:00 · CISA Advisories · CISA Adds Four Known Exploited Vulnerabilities to Catalog

SPOJENO PŘES CVE AL26-018 - Vulnerability affecting Cisco ASA and Secure Firewall Threat Defense Software Remote Access SSL VPN - CVE-2026-20349

Number: AL26-018Date: August 13, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested. Details The Canadian…

KEV ✓ EPSS 0.02 CVE-2026-20349 Cisco veřejná správa CA RO IT FR US

13. 8. 15:14 · Cyber Centre Kanada · AL26-018 - Vulnerability affecting Cisco ASA and Secure Firewall Threat Defense Software Remote Access SSL VPN - CVE-2026-20349 12. 8. 14:14 · DNSC Rumunsko · ALERTĂ: Vulnerabilitate exploatată activ în Cisco 12. 8. 11:20 · CSIRT Itálie (ACN) · Rilevato sfruttamento di vulnerabilità in prodotti Cisco 12. 8. 02:00 · CERT-FR – avis · Vulnérabilité dans les produits Cisco (12 août 2026) 11. 8. 18:39 · Cisco PSIRT · Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability 11. 8. 02:00 · CISA KEV · Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (CVE-2026-20349)

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Firewall Threat Defense (FTD) Heap Inspection Vulnerability CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability CVE-2026-72898 Metabase SQL Injection Vulnerability These types of vulnerabilities are a frequent attack vector for malicious…

KEV ✓ EPSS 0.94 CVE-2026-20349 CVE-2026-68820 CVE-2026-72898 Cisco Microsoft Metabase veřejná správa US

11. 8. 14:00 · CISA Advisories · CISA Adds Three Known Exploited Vulnerabilities to Catalog

22nd June – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 22nd June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Texas Parks and Wildlife Department has been affected by a third-party data breach involving its license system vendor. The incident exposed driver’s license information, passport numbers, emails, phone numbers, and residential addresses for 3,087,721 hunting and fishing license customers. Social Security numbers and payment data were not affected.…

KEV ✓ EPSS 0.96 CVE-2026-20245 CVE-2026-33017 CVE-2026-34908 CVE-2026-34909 CVE-2026-34910 CVE-2026-41947 CVE-2026-41948 CVE-2026-55255 Cisco Ubiquiti Dify Langflow veřejná správa zdravotnictví finance IL

1. 7. 13:29 · Check Point Research · 22nd June – Threat Intelligence Report

Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an update to V1: Emergency Directive (ED) 25-03: Identify and Mitigate Potential Compromise of Cisco Devices related to Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) products. According to the update, the ArcaneDoor threat actor has developed a previously unknown persistence mechanism that is preserved across upgrading to the fixed releases that…

KEV ✓ EPSS 0.87 CVE-2025-20333 CVE-2025-20362 Cisco veřejná správa US

19. 5. 19:49 · Cisco PSIRT · Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense