Threatline

Results for “"active exploit"”

1–10 of 468 articles

Best match · title matches first

The Hacker News

13 days ago

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments - CVE-2026-109618 - An out-of-memory

CVE-2026-109618coverage

Threatline

Results for “"active exploit"”

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

CISA alerts of active exploitation of three Linux kernel flaws

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild