CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

Overview On August 2, 2026, N-able published a security advisory for CVE-2026-18577, an authentication bypass vulnerability affecting N-central that was discovered being exploited in-the-wild after an incomplete fix for an earlier authentication bypass issue, CVE-2026-18556 was disclosed...

CVE-2023-54359

creationtimestamp| type| source ---|---|--- 2026-08-03 11:01:24+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a34d52da-21b0-44bb-93d8-c723648a24f2 2026-08-04 01:00:19+00:00| exploited|...

CVE-2026-3836

creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:32+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfa22a55-3ac8-46bc-bb9d-e1411808358a...

CVE-2024-37014

creationtimestamp| type| source ---|---|--- 2026-08-01 11:00:22+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49b08f6f-9f5e-4e73-9c20-98471e002f42 2026-08-04 18:00:08+00:00| confirmed|...

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center FMC Software to its Known Exploited Vulnerabilities KEV catalog, following reports of zero-day exploitation. The vulnerability,...

CVE-2026-16812

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

EUVD-2026-49334

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-16812

CVE-2026-16812 affects VeloCloud Orchestrator (VCO) On-Prem. The vulnerability is an OS command injection that could allow a remote attacker to access privileged internal functionality and impact the VCO host, compromising confidentiality, integrity, and availability of the orchestrator and manag...

CVE-2026-16812 VeloCloud Orchestrator OS Command Injection

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-16812

creationtimestamp| type| source ---|---|--- 2026-07-27 15:26:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrn7h6zcl32w 2026-07-27 17:00:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ab0b145-d51f-447c-8ca9-a77176d7904b...

PT-2026-64991

Name of the Vulnerable Software and Affected Versions VeloCloud Orchestrator VCO on-prem affected versions not specified Description A security issue in the on-premises version of the orchestrator allows a remote attacker to access privileged internal functionality, which may lead to OS command...

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

Overview On July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the SmartConsole login process classified as...

openjdk: OpenJDK: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

CVE-2026-16232

creationtimestamp| type| source ---|---|--- 2026-07-22 16:00:33+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d66db7d5-24d6-4124-9455-9bff341e18ce 2026-07-22 17:30:10+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mratyvgrd22p...

CVE-2024-36420

creationtimestamp| type| source ---|---|--- 2026-07-17 09:00:31+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/863e96d2-7d1c-4108-8e55-ed71b3ff2bb3...

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by July 19, 2026. T...

Begun, the Patch Wars have

Welcome to this week's edition of the Threat Source newsletter. We all knew, to some degree or another, that this summer was going to a hot mess. I don't mean FIFA drama or record setting heat waves. I mean the slow but steady momentum that AI frontier models were accruing for vulnerability...

July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days

Just one month ago, June 2026 Patch Tuesday broke Microsoft’s previous record with 206 CVEs and three zero‑days. July now triples that count, reinforcing that the era of “small” Patch Tuesdays may be over as AI‑driven vulnerability discovery ramps up. The update includes 59 critical...

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for July 2026, which includes 622 vulnerabilities affecting a range of products, including 57 that Microsoft marked as "critical." Microsoft notes that two of the vulnerabilities disclosed this month have been exploited in the wild. CVE-2026-5615...

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeonin...