New that day
- highpatchedexploited Google Pixel Improper Authorization Vulnerability Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges. Added to CISA KEV on 2026-09-16 (federal deadline 2026-09-19).
- highpatchedexploited Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. Added to CISA KEV on 2026-09-16 (federal deadline 2026-09-19).
- highpatchedexploited Acronis Backup Incorrect Default Permissions Vulnerability Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation. Added to CISA KEV on 2026-09-16 (federal deadline 2026-09-19).