1. OVERVIEW: Cisco Catalyst SD-WAN Controllers are affected by two vulnerabilities that can be chained together to achieve full system compromise. The first vulnerability, CVE-2026-20182, exists within the controller's peering authentication mechanism. By sending crafted requests to an affected system, an unauthenticated remote attacker can authenticate as an internal, high-privileged, non-root user account. This access provides the attacker with NETCONF capabilities, al

1. Incident Overview Check Point disclosed CVE-2026-50751, a critical zero-day authentication bypass vulnerability affecting multiple VPN products, including Mobile Access VPN, SSL VPN, Remote Access VPN, and Spark gateways. The vulnerability allows remote attackers to establish unauthorized VPN connections without valid credentials, providing a potential entry point into internal networks. According to Check Point, exploitation activity has been linked to tooling associ

Security teams are being urged to patch vulnerable SolarWinds Serv-U installations after CISA added CVE-2026-28318 to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability affects SolarWinds Serv-U Managed File Transfer and Secure FTP products and has already been observed being exploited in the wild to disrupt services and cause outages. Unlike many vulnerabilities that remain theoretical, this one has crossed an important threshold: attackers are actively usi