A logged-in SharePoint user with only basic privileges can send a crafted request that triggers code execution on the server, and attackers are already doing this.
Every CISA KEV addition, plus critical-severity flaws in the kit that sits at the edge of a network: firewalls, VPN gateways, load balancers, routers, switches and management consoles.
Colour on the left of each entry is the CVSS severity. A pink CISA KEV badge means the flaw is being exploited right now — treat those first, whatever the score says. How each post is sourced and checked is set out in the methodology.
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This …
WordPress Core Remote File Inclusion Vulnerability
An unauthenticated attacker can trick WordPress’s page-template lookup into loading a readable PHP file from outside the active theme, potentially leading to remote code execution on the server.
Adobe Commerce and Magento Incorrect Authorization Vulnerability
An unauthenticated attacker can bypass an authorization check in Adobe Commerce and Magento to read or alter sensitive data, no login or user action needed, and it’s already being exploited.
WSO2 Multiple Products Path Traversal Vulnerability
A flaw in how WSO2’s API gateway and control plane products validate JWT signing algorithms lets an attacker forge a token and walk in as an administrator, no login required.
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
An unauthenticated attacker can reach on-prem VeloCloud Orchestrator over the network and gain privileged access to the host, putting the whole SD-WAN management plane at risk.
Check Point Multiple Products Improper Certificate Validation Vulnerability
A flawed certificate check during VPN handshakes on Check Point Security Gateway and Spark Firewall lets an unauthenticated attacker on the network run arbitrary code on the Gateway itself.
Check Point Multiple Products Path Traversal Vulnerability
An unauthenticated attacker can abuse a directory traversal flaw in Check Point’s management servers and SmartEvent to upload and run arbitrary scripts, with no login or user action required.
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
An unauthenticated, network-reachable heap overflow in BIG-IP APM lets attackers achieve remote code execution on any virtual server combining an access policy with an OAuth profile.
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute …