/
attack_type:remote_code_execution × latest_source_host:cisa.gov × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · · 2 fontes · 2 atualizações critical

CISA urges Citrix NetScaler ADC/Gateway patching and compromise checks as zero-days, including new CVE-2026-107406, are exploited

CISA issued an alert on exploitation of critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, noting confirmed malicious activity involving at least some of them. The alert references Citrix bulletins for CVE-2026-107406, CVE-2026-88779 and CVE-2026-88771 through CVE-2026-88778. Because NetScaler updates can be …

cisa.gov · · 2 atualizações critical

CISA adds exploited Ivanti Connect Secure zero-day CVE-2026-104935 (unauthenticated RCE) and Windows CVE-2026-96951 to KEV

CISA warns that threat actors are exploiting CVE-2026-104935, a zero-day authentication bypass by spoofing in Ivanti Connect Secure that allows remote, unauthenticated execution of arbitrary commands. The activity is being used for credential theft and data exfiltration. On Oct. 13, 2026, CISA added it to its Known Exploited Vulnerabiliti…