Critical Vulnerabilities and Exploits Targeting Cisco, Canvas, and Microsoft Systems

• •CVE-2026-20182 allows unauthenticated admin access on Cisco devices, with active exploitation reported.
• •Canvas LMS was defaced by ShinyHunters, claiming to possess 275 million records from educational institutions.
• •Critical XSS vulnerabilities in Microsoft Exchange are being actively exploited through crafted emails.

A series of critical vulnerabilities have emerged, including CVE-2026-20182, which allows unauthenticated attackers to gain admin access to Cisco Catalyst SD-WAN Controllers. ShinyHunters defaced the Canvas LMS login page, claiming to have 275 million records from around 9,000 educational institutions. An XSS flaw in on-prem Exchange is being exploited via crafted emails, affecting Outlook Web Access users. Two unpatched Windows zero-days have been disclosed, including YellowKey, which bypasses BitLocker encryption, and GreenPlasma, which escalates privileges. Additionally, malicious npm package updates have compromised OpenAI employee laptops, exposing limited internal credentials. Microsoft has addressed 118 vulnerabilities, but no emergency patches were issued this month. The time-to-exploit for vulnerabilities in AI infrastructure is now effectively zero, highlighting the urgency for immediate action.