Multiple Vulnerabilities Exploited in Cybersecurity Threats

Multiple Vulnerabilities Exploited in Cybersecurity Threats

First seen 10 Feb 2026, 18:13 UTC •Digital.Nhs.Uk •18.3

Article Content

Browse articles
ThreatCluster

Recent advisories detail multiple vulnerabilities affecting various software products. CVE-2026-21509, published on January 26, 2026, is under active exploitation and could allow unauthenticated remote code execution. Additionally, CVE-2026-20045, published on January 21, 2026, is also noted for its active exploitation, impacting Microsoft 365 and Office applications.

How this analysis works

Timeline

2025-08-06
CVE-2025-53786 published
2025-12-19
CVE-2025-14733 published
2026-01-21
CVE-2026-20045 published and added to CISA KEV
2026-01-22
First public PoC for CVE-2026-20045
2026-01-26
CVE-2026-21509 published and added to CISA KEV
2026-01-27
First public PoC for CVE-2026-21509
2026-02-10
Cisco ASA and FMC Software advisories published

Extracted Entities

1 / 2