SonicWall
SonicWall SMA1000: active exploitation of CVE-2026-15409 and CVE-2026-15410
SonicWall confirms active exploitation of CVE-2026-15409 and CVE-2026-15410 in SMA1000 appliances. Fixed versions, indicators, and response steps.
campaign-alerts
cve
CVE-2026-18577: N-able N-central Auth Bypass with Incomplete Patch and Cloudflare Tunnel Persistence
CVE-2026-18577: N-able N-central Auth Bypass with Incomplete Patch and Cloudflare Tunnel Persistence Executive Summary CVE-2026-18577 is a critical authentication-bypass vulnerability in N-able N-central, the flagship Remote Monitoring and Management (RMM) platform. The flaw is an incomplete patch for CVE-2026-18556.
Threat Intel
URGENT ADVISORY: ToolShell — Critical SharePoint RCE Chain Under Active Exploitation
URGENT: CVE-2025-53770/53771 ToolShell exploit chain under active exploitation since July 17, 2025. If you run on-prem SharePoint Server, you are vulnerable to unauthenticated RCE.