New that day
- criticalpatchedexploited Ahsay AhsayCBS Command Injection Vulnerability Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133. Can be chained with CVE-2026-105133. Added to CISA KEV on 2026-10-14 (federal deadline 2026-10-17).
- criticalpatchedexploited Cisco Secure Email Gateway Relative Path Traversal Vulnerability Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. Added to CISA KEV on 2026-10-14 (federal deadline 2026-10-17).
- highpatchedexploited Palo Alto Networks PAN-OS Code Injection Vulnerability Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. Added to CISA KEV on 2026-10-14 (federal deadline 2026-10-17).