Vulnerability Intelligence Report — June 13, 2026
Vulnerability Intelligence Report — June 13, 2026 Coverage: June 1–13, 2026 | New CISA KEV additions (period): 12 | New KEV since yesterday: 1 | … Read More
Vulnerability Intelligence Report — June 12, 2026
Coverage Period: June 1–12, 2026 Report Date: June 12, 2026 Vulnerabilities Tracked: 47 New CISA KEV Additions: 11 Critical/High Severity: 23 Actively Exploited (KEV + … Read More
CVE-2026-48027: Nx Console Embedded Malicious Code Vulnerability (CISA KEV)
CISA Known Exploited Vulnerability (KEV): This vulnerability has been added to the CISA Known Exploited Vulnerabilities Catalog on 2026-05-27 with a required action date of … Read More
CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (CISA KEV)
CISA Known Exploited Vulnerability (KEV): This vulnerability has been added to the CISA Known Exploited Vulnerabilities Catalog on 2026-05-29 with a required action date of … Read More
Ivanti Sentry Critical Vulnerabilities: Remote Takeover of Mobile Device Gateway Appliances
Critical vulnerabilities in Ivanti Sentry (formerly MobileIron Sentry) enable remote attackers to take over affected gateway appliances. Ivanti Sentry serves as the secure gateway between … Read More
Veeam Backup & Replication Critical Remote Code Execution: Backup Servers at Direct Risk of Compromise
A critical remote code execution vulnerability in Veeam Backup & Replication allows attackers to execute arbitrary code on backup servers. Veeam is the most widely … Read More
Vulnerability Intelligence Report — June 11, 2026
Vulnerability Intelligence Report — June 11, 2026 Coverage: June 10–11, 2026 | New CISA KEV additions: 0 | KEV deadlines today: 1 | Patch Tuesday … Read More
SolarWinds Serv-U Denial of Service (CVE-2026-28318): CISA KEV — Actively Exploited Unauthenticated Service Crash via Crafted POST Requests
An uncontrolled resource consumption vulnerability in SolarWinds Serv-U, tracked as CVE-2026-28318, allows unauthenticated attackers to crash the Serv-U service by sending crafted POST requests with … Read More
Arista EOS Tunnel Decapsulation Vulnerability (CVE-2026-7473): CISA KEV — Incorrect Packet Forwarding Enables Network Bypass
A vulnerability in Arista Extensible Operating System (EOS), tracked as CVE-2026-7473, causes switches to incorrectly decapsulate and forward unexpected tunneled packets when tunnel decapsulation configurations … Read More
Nuance PowerScribe Deserialization Remote Code Execution (CVE-2026-26142): Unauthorized Code Execution in Healthcare Speech Recognition Platform
A deserialization vulnerability in Nuance PowerScribe, tracked as CVE-2026-26142 (CVSS 9.8), allows an unauthorised attacker to execute arbitrary code over a network. Nuance PowerScribe is … Read More