Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Cisco has disclosed a critical vulnerability (CVE-2026-76460) in its Identity Services Engine (ISE) that allows unauthenticated remote attackers to bypass authentication via a flaw in an API endpoint. This vulnerability has a CVSS score of 10.0 and is actively being exploited in the wild, prompting...
F5 disclosed a critical vulnerability in NGINX, identified as CVE-2026-42533, which can lead to remote code execution (RCE) and denial-of-service (DoS) attacks. The flaw is a heap buffer overflow triggered by crafted HTTP requests that exploit unsafe regex processing in the map directive. This vulne...
Fedora 44 has released critical updates for multiple NGINX modules due to vulnerabilities identified as CVE-2026-42533, CVE-2026-60005, and CVE-2026-56434, all published on July 15, 2026. These vulnerabilities allow for arbitrary code execution via crafted HTTP requests, affecting systems running th...
On October 14, 2026, NGINX released updates to address five vulnerabilities, including three memory bugs that could allow remote code execution (RCE) and a TLS flaw that may permit session forgery. The vulnerabilities, tracked as CVE-2026-97205, CVE-2026-93479, and CVE-2026-15176, have been rated as...
