Prove it. Don't just claim it.
Contact & Support
EN
Prove it. Don’t just claim it.
Start free
Categories
Tags
Authors
Teams
Archives
Categories:   All Categories
Suggested keywords
x
Security Talent

Cisco Confirms Active Exploitation of Catalyst SD-WAN Authentication Bypass

Security operations team reviewing Cisco Confirms Active Exploitation of Catalyst SD-WAN Authentication Bypass
Actively exploited vulnerability

Patch and investigate

Cisco confirmed active exploitation of CVE-2026-20133 in Catalyst SD-WAN and recommends fixed releases plus network restrictions around control components.

At a glance

  • Cisco became aware of active exploitation in April 2026.
  • Defenders should restrict management access and examine control-plane logs in addition to patching.
Tags:
Cybersecurity News Threat Intelligence Cisco

Copyright

© SecurityTalent.com — original summary and analysis

  52 Hits
0 Comments
Security Talent

Critical FortiSandbox JRPC Flaw Enables Authentication Bypass

Security operations team reviewing Critical FortiSandbox JRPC Flaw Enables Authentication Bypass
Critical vendor advisory

Patch immediately

Fortinet rated CVE-2026-39813 critical after a path-traversal flaw in the FortiSandbox JRPC API could let an unauthenticated attacker bypass authentication and escalate privileges.

At a glance

  • FortiSandbox 5.0.0 through 5.0.5 and 4.4.0 through 4.4.8 are affected.
  • Fortinet lists 5.0.6 and 4.4.9 as fixed releases.
Tags:
Cybersecurity News Vulnerabilities Patches Fortinet

Copyright

© SecurityTalent.com — original summary and analysis

  50 Hits
0 Comments
Security Talent

FortiSandbox Cloud Fixes vmimages Command Injection

Security operations team reviewing FortiSandbox Cloud Fixes vmimages Command Injection
Cloud sandbox security

Update service version

Fortinet updated FG-IR-26-096 for CVE-2026-25836, an authenticated command injection in the vmimages update feature of FortiSandbox Cloud and PaaS.

At a glance

  • The issue requires a privileged super-admin profile and CLI access.
  • Fortinet recommends version 5.0.5 or later for affected 5.0 deployments.
Tags:
Cybersecurity News Vulnerabilities Patches Fortinet

Copyright

© SecurityTalent.com — original summary and analysis

  55 Hits
0 Comments
Security Talent

Fortinet SSO Abuse Advisory Calls for Admin Account Review

Security operations team reviewing Fortinet SSO Abuse Advisory Calls for Admin Account Review
Actively exploited vulnerability

Investigate and patch

Fortinet documented active exploitation of CVE-2026-24858, including configuration theft and creation of persistent administrator accounts through FortiOS SSO abuse.

At a glance

  • Fortinet rates the issue critical and marks it known exploited.
  • Defenders should patch and search for unexpected administrator names and configuration downloads.
Tags:
Cybersecurity News Threat Intelligence Fortinet

Copyright

© SecurityTalent.com — original summary and analysis

  45 Hits
0 Comments
English English