ttps_attack:T1595.002 × criticity:critical × latest_source_host:f5.com × limpar

Resultados

2 casos · pág. 1/1

f5.com · há 1d exploit público critical

F5 Labs observes lone Russian IP scanning for SmarterMail CVE-2026-24423 unauthenticated RCE, a CISA KEV-listed flaw used in ransomware

F5 Labs analyzed exploitation of CVE-2026-24423, a CVSS 9.8 unauthenticated remote code execution flaw in SmarterTools SmarterMail (CWE-306). CISA added it to the KEV catalog on February 2, 2026 and notes it has been used in ransomware campaigns. Despite public write-ups, F5 sensors saw only one IP, 193.24.123.58 (ASN 200593, Russian ISP …

CVE-2026-24423 CVE-2026-20128 CVE-2017-9841

f5.com · há 1d exploit público critical

Drupal Core CVE-2026-9082 JSON:API pre-auth SQL injection actively exploited within days of disclosure

CVE-2026-9082 is a critical (CVSS 9.8) pre-authentication SQL injection in the JSON:API module of Drupal Core. It was published on May 20, 2026 and added to the CISA KEV catalog the same month, with a remediation deadline of May 27. F5 sensors recorded 576 exploitation attempts from 9 source IPs between May 20 and May 31, 2026. The earlie…

CVE-2026-9082