0 spills in 2025 for Remote access
Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.
Past orders
- criticalpatchedexploited BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance. Added to CISA KEV on 2026-10-16 (federal deadline 2026-10-19).
- highpatchedexploited ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation. Added to CISA KEV on 2026-09-11 (federal deadline 2026-09-14).
- highpatchedexploited N-able N-central Static Code Injection Vulnerability N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution. Added to CISA KEV on 2026-09-08 (federal deadline 2026-09-11).
- highpatchedexploited N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass. Added to CISA KEV on 2026-08-04 (federal deadline 2026-08-07).
- highpatchedexploited N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556. Added to CISA KEV on 2026-08-03 (federal deadline 2026-08-06).
- criticalpatchedexploited ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems. Added to CISA KEV on 2026-04-28 (federal deadline 2026-05-12).
- criticalpatchedexploited BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption. Added to CISA KEV on 2026-02-13 (federal deadline 2026-02-16).
Follow Remote access
RSS: /feed.xml?stack=remote-support. JSON: /incidents.json?stack=remote-support. Or add it to your usual for delivery.