Friday, April 24, 2026
HomeTagsVulnerabilities

Tag: Vulnerabilities

CISA Issues Warning on Exploited Vulnerabilities in Cisco Identity Services Engine

The Cybersecurity and Infrastructure Security Agency (CISA) has added two critical Cisco Identity Services Engine vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, warning that threat actors are actively exploiting these vulnerabilities in real-world attacks. The vulnerabilities, tracked as CVE-2025-20281 and CVE-2025-20337, affect Cisco...

PoC Exploit for Critical Cisco ISE Vulnerabilities Used in Ongoing Attacks

A critical vulnerabilities in Cisco Identity Services Engine (ISE), demonstrating how attackers can achieve complete system compromise with root access. The vulnerabilities, tracked as CVE-2025-20281 and CVE-2025-20337, affect the pre-authentication phase and allow remote code execution without requiring valid credentials. The vulnerability was initially reported...

UNC3886 Hackers Targeting Vulnerabilities in VMware vCenter/ESXi, Fortinet FortiOS, and Junos OS

Singapore's cybersecurity landscape faces an unprecedented threat from UNC3886, an advanced persistent threat (APT) group that has been systematically targeting critical infrastructure across telecommunications, government, technology, and defense sectors. The sophisticated cyber espionage group demonstrates exceptional capabilities in rapidly exploiting zero-day vulnerabilities in enterprise...

LG Innotek Camera Vulnerability Expose Devices to Admin Hijacking

A critical security vulnerability has been discovered in LG Innotek's LNV5110R camera model that could allow remote attackers to gain full administrative control of the devices. The Cybersecurity and Infrastructure Security Agency (CISA) issued an advisory on July 24, 2025, warning that the authentication...

Salesforce Vulnerabilities Expose Systems to RCE Attacks — Apply Patches Now

Salesforce has disclosed multiple critical security vulnerabilities affecting Tableau Server installations worldwide, with the most severe vulnerabilities enabling remote code execution and unauthorized database access. The vulnerabilities, addressed in the June 26, 2025 maintenance release, pose significant risks to organizations using affected versions of...

Multiple Vulnerabilities in Tridium Niagara Framework Allow Attackers to Exfiltrate Sensitive Network Data

Critical vulnerabilities in Tridium's Niagara Framework®, a widely-used software platform that connects and manages diverse devices in building automation, industrial control systems, and smart infrastructure environments. These vulnerabilities, if exploited under specific conditions, could allow attackers to compromise entire Niagara systems and collect sensitive...