THREAT INTELLIGENCE · RESEARCH · COMMUNITY

Security news,
without the noise.

Practical coverage of vulnerabilities, emerging threats, and the tools shaping modern security.

Latest intelligence

404 articles

CISA Known Exploited Vulnerabilities · CVEOct 22, 2026 · 08:43 PM · UTC · UTC+00:00

CVE-2026-0322: Palo Alto Networks PAN-OS Code Injection Vulnerability

Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.

CVE

CISA Known Exploited Vulnerabilities · CVEOct 22, 2026 · 08:43 PM · UTC · UTC+00:00

CVE-2026-105133: Ahsay AhsayCBS Improper Authentication Vulnerability

Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.

CVE

CISA Known Exploited Vulnerabilities · CVEOct 22, 2026 · 08:43 PM · UTC · UTC+00:00

CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.

CVE

CISA Known Exploited Vulnerabilities · CVEOct 22, 2026 · 08:43 PM · UTC · UTC+00:00

CVE-2026-105134: Ahsay AhsayCBS Command Injection Vulnerability

Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.