⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This CISA advisory describes CVE-2026-11917, a path traversal vulnerability in Rockwell Automation ThinManager. An authenticated attacker can exploit improper file save operation limits to write arbitrary files to restricted system directories.
CISA published a critical advisory on vulnerabilities in the Weintek cMT3092X HMI device used across industrial sectors. These flaws could enable remote attackers to gain unauthorized control of the interface.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
View CSAF Summary Successful exploitation of this vulnerability could allow a malicious user the ability to deliver malicious firmware that can update and gain full control of the controller.
GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group.
This CISA advisory covers multiple vulnerabilities in MZ Automation libIEC61850, including stack and heap buffer overflows, null pointer dereference, and improper invalid structure handling. Successful exploitation could allow an unauthenticated network-adjacent attacker to crash critical IEC 61850 services or execute arbitrary code.