Secure Bulletin Navigating the cyber sea with knowledge
Home > Tag > actively exploited
#actively exploited

Attackers Are Already Probing a Critical Flaw in Sangoma’s Switchvox VoIP Platform

4 September 2026  |  dark6  |  Vulnerability

A critical, unauthenticated SQL injection flaw in Sangoma Switchvox is being actively probed in the wild just weeks after a patch became available. With thousands of phone systems...

>> read more

Emergency PaperCut Fix Targets Actively Exploited Flaw Affecting Every Supported Release

28 August 2026  |  dark6  |  Vulnerability

PaperCut has issued emergency builds after confirming real-world attacks against PaperCut NG and MF servers. Administrators should isolate internet-facing application servers, install the appropriate update and investigate for...

>> read more

CISA Gives Agencies Until August 21 to Patch Actively Exploited Windows VPN Flaw

20 August 2026  |  dark6  |  Vulnerability

CISA has added a double-free memory corruption bug in Microsoft's Internet Key Exchange service extensions to its Known Exploited Vulnerabilities catalog after confirming active attacks, giving federal agencies...

>> read more

Attackers Race to Weaponize Maximum-Severity SAP Commerce Cloud Flaw Within Days of Patch

17 August 2026  |  dark6  |  Vulnerability

A maximum-severity remote code execution flaw in SAP Commerce Cloud is already being probed by attackers just days after a fix shipped, with honeypot sensors picking up automated...

>> read more

SonicWall VPN Gateways Hit by Zero-Click Root Takeover Chain Tied to INC Ransomware

4 August 2026  |  dark6  |  Vulnerability

Attackers are chaining two SonicWall SMA 1000 series flaws to gain root access to VPN gateways without a password or any user interaction. Researchers at Resecurity tie the...

>> read more

Arista VeloCloud SD-WAN Orchestrators Under Active Attack via Maximum-Severity Command Injection Flaw

4 August 2026  |  dark6  |  Vulnerability

A perfect-10 command injection vulnerability in on-premises Arista VeloCloud Orchestrator deployments is being actively exploited, letting unauthenticated attackers reach privileged internal functions over the exposed web interface. Patches...

>> read more

CISA Confirms Active Exploitation of Critical SharePoint Deserialization Flaw

18 July 2026  |  dark6  |  Vulnerability

CISA has added CVE-2026-58644, a critical unauthenticated remote code execution flaw in Microsoft SharePoint, to its Known Exploited Vulnerabilities catalog after confirming real-world attacks. Federal agencies must remediate...

>> read more

Hackers Actively Exploit CVE-2026-46817 in Oracle E-Business Suite — 456 Attacks Recorded in 24 Hours

30 June 2026  |  dark6  |  Vulnerability

Threat actors are actively exploiting CVE-2026-46817, a critical CVSS 9.8 unauthenticated remote takeover flaw in Oracle E-Business Suite, with 456 attack hits recorded in a single day across...

>> read more