Zero-day

9 posts tagged Zero-day.

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jul 1, 2026 3 min read

Patch Now: SharePoint Server Is Exploited, Federal Deadline July 4

CVE-2026-45659 is an actively exploited deserialization flaw in Microsoft SharePoint Server. CISA added it to KEV on July 1 with a federal deadline of July 4, 2026.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 30, 2026 3 min read

Attackers Are Exploiting SimpleHelp: CVSS 10 Auth Bypass in the Wild

CVE-2026-48558, a CVSS 10 authentication bypass in SimpleHelp, is actively exploited and added to CISA KEV with a July 2 federal patch deadline.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 26, 2026 3 min read

Cisco Unified CM SSRF Exploited, Patch by June 28

CVE-2026-20230 is a server-side request forgery flaw in Cisco Unified CM and Unified CM SME added to CISA KEV on June 25. Federal deadline is June 28.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 23, 2026 5 min read

Attackers Can Reach Root on UniFi OS and Lantronix Edge Servers

Ubiquiti UniFi OS and Lantronix EDS5000 reached CISA KEV on June 23 with unauthenticated root flaws, and Copy Fail (CVE-2026-31431) now hits B&R OT gear. Patch fast.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 18, 2026 4 min read

Splunk Enterprise CVE-2026-20253 Exploited: Patch Before June 21

CISA added Splunk Enterprise CVE-2026-20253 to KEV on June 18, 2026. Unauthenticated file write via PostgreSQL sidecar, federal due date June 21. Who is affected and what to do.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 17, 2026 5 min read

Attackers Are Exploiting JCE Editor to Plant PHP Webshells on Joomla Sites

CVE-2026-48907 in Joomla Content Editor lets unauthenticated attackers upload PHP webshells. CISA added it to KEV on June 16; patch to JCE 2.9.99.6 now.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 15, 2026 5 min read

Attackers Are Exploiting Cisco SD-WAN Manager and LiteSpeed cPanel Plugin

Attackers are exploiting Cisco Catalyst SD-WAN Manager (CVE-2026-20262) and the LiteSpeed cPanel plugin (CVE-2026-54420), both added to CISA KEV on June 15, 2026. Patch now.

CloudKey Security Research

CloudKey rapid-response alert for Oracle PeopleSoft PeopleTools CVE-2026-35273, an actively exploited unauthenticated takeover vulnerability

Zero-day Jun 13, 2026 4 min read

Oracle PeopleSoft CVE-2026-35273 Is Exploited: Patch PeopleTools 8.61 and 8.62

Oracle PeopleSoft PeopleTools CVE-2026-35273: active exploitation, known ransomware use, unauthenticated takeover, CVSS 9.8, on CISA KEV. Who is affected and what to do.

CloudKey Security Research

CloudKey rapid-response alert for Ivanti Sentry CVE-2026-10520, an actively exploited unauthenticated remote code execution vulnerability

Zero-day Jun 12, 2026 3 min read

Ivanti Sentry CVE-2026-10520 Is Exploited: Patch to R10.7.1 Now

CISA added Ivanti Sentry CVE-2026-10520 to KEV on June 11, 2026. Unauthenticated root RCE, CVSS 10.0, federal due date June 14. Here is who is affected and what to do.

CloudKey Security Research