Network Security

Flat white line-art of two network appliances with an open padlock and one flat red dot on a solid deep-teal background.

Vulnerabilities

Fortinet Patches FortiWeb and FortiManager Auth Flaws — Random Logins, FortiGate Impersonation

Fortinet patched high-severity authentication flaws in FortiWeb and FortiManager. One lets a remote attacker log in with random usernames and passwords; the other lets an attacker impersonate any FortiGate managed by FortiManager. No active exploitation is reported — patch now.

Flat white line-art of a network load balancer appliance with a single red alert dot, marking Progress Kemp LoadMaster CVE-2026-8037 added to CISA KEV catalog.

Vulnerabilities

Progress Kemp LoadMaster CVE-2026-8037 (CVSS 9.6) Added to CISA KEV After 792 Exploit Attempts

CISA added Progress Kemp LoadMaster's CVE-2026-8037 — a CVSS 9.6 command injection flaw — to its Known Exploited Vulnerabilities catalog after 792 documented exploit attempts. Federal agencies have until August 10 to patch. Here is how to find, fix, and verify your deployments.

Flat white line-art of a Cisco Catalyst SD-WAN router and an IOS XE switch under a shield, one flat red dot marking the criticals.

Vulnerabilities

Cisco Patches 12 Catalyst SD-WAN and IOS XE Flaws, Three Rated CVSS 9.9

Cisco's newest hardening release patches 12 Catalyst SD-WAN and IOS XE flaws — three of them rated CVSS 9.9 and a fourth at 9.8. Cisco says none are exploited yet, which makes this a patch-priority call: take the criticals first, schedule the rest by exposure.

Flat white line-art of a firewall console opened by a built-in key, on a teal background — the Cisco FMC static-credentials zero-day, CVE-2026-20316.

Vulnerabilities

Cisco FMC Zero-Day CVE-2026-20316 Actively Exploited via Static Credentials

Static credentials shipped inside a firewall manager handed attackers a built-in way in. Cisco has released hot fixes for Secure Firewall Management Center, and the zero-day is already on CISA's exploited-vulnerabilities list.

Flat white line-art of a magnifying glass over a management console and a script sheet, on a teal background — Check Point SmartConsole CVE-2026-16232 PoC.

Vulnerabilities

Rapid7 Publishes Public PoC for Exploited Check Point SmartConsole Auth Bypass

From advisory to public PoC — Check Point SmartConsole in the spotlight this week.

Flat white line-art of a network orchestrator console with a single open door, on a deep-teal background — the Arista VeloCloud Orchestrator command-injection zero-day.

Vulnerabilities

Arista VeloCloud Orchestrator Zero-Day (CVE-2026-16812, CVSS 10.0) Under Active Exploitation

CVSS 10.0 on the on-premises SD-WAN management box — Arista has shipped fixes, active exploitation is confirmed, and CISA has put federal agencies on a short clock.

Flat white line-art of a server management chip sitting beneath a stacked server, one door left ajar, on a deep-teal background — internet-exposed BMC IPMI hash disclosure.

Vulnerabilities

24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login

Twenty-four thousand hash leaks underneath the OS — the BMC exposure map lands this week, and the fix is not a patch but a posture change.

Flat white line-art of a forum message board with an open padlock, on a deep-blue background — the vBulletin pre-auth code-execution exploit.

Vulnerabilities

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

Patch first, patch fast — a public vBulletin exploit lands this week.

Flat white line-art of a management console with an open lock swinging free, on a deep-blue background — the Check Point SmartConsole authentication bypass CVE-2026-16232.

Vulnerabilities

Check Point Patches Exploited SmartConsole Authentication Bypass CVE-2026-16232

A Check Point SmartConsole authentication bypass under active attack — defender teams accelerate patch verification this week.

Editorial illustration of an NGINX worker gear cracking under an overloaded heap stack with a fresh patch, marking F5's critical CVE-2026-42533 fix.

Vulnerabilities

F5 Publishes Critical NGINX Patch for Heap Buffer Overflow (CVE-2026-42533) That Could Enable Denial of Service or RCE

A critical NGINX flaw with remote-unauthenticated attack surface — defender verification across NGINX and NGINX Plus deployments this week.

Line-art of two magnifiers over a breached gateway appliance revealing a fingerprint, marking Volexity's UTA0533 attribution of the SonicWall SMA zero-days.

Threat Intelligence

Volexity Attributes SonicWall SMA Zero-Day Exploitation to Previously Undocumented UTA0533 Actor Since June 22

A second SonicWall SMA attribution lands — Volexity names UTA0533 alongside the Dark Reading INC Ransomware framing this weekend.

See all

Wireshark 4.6.8 Patches 28 Vulnerabilities and 25 Bugs: What SOC and IR Teams Should Do

Fortinet Patches FortiWeb and FortiManager Auth Flaws — Random Logins, FortiGate Impersonation

Progress Kemp LoadMaster CVE-2026-8037 (CVSS 9.6) Added to CISA KEV After 792 Exploit Attempts

Cisco Patches 12 Catalyst SD-WAN and IOS XE Flaws, Three Rated CVSS 9.9

Cisco FMC Zero-Day CVE-2026-20316 Actively Exploited via Static Credentials

Rapid7 Publishes Public PoC for Exploited Check Point SmartConsole Auth Bypass

Arista VeloCloud Orchestrator Zero-Day (CVE-2026-16812, CVSS 10.0) Under Active Exploitation

24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

Check Point Patches Exploited SmartConsole Authentication Bypass CVE-2026-16232

F5 Publishes Critical NGINX Patch for Heap Buffer Overflow (CVE-2026-42533) That Could Enable Denial of Service or RCE

Volexity Attributes SonicWall SMA Zero-Day Exploitation to Previously Undocumented UTA0533 Actor Since June 22