Cisco Expressway

Cisco Patches Critical Expressway Series Vulnerabilities Including Root RCE Flaw

Cisco Expressway vulnerabilities overview showing Cisco security advisory fixes for CVE-2026-76466, CVE-2026-76490, and CVE-2026-76435

Cisco Patches Critical Expressway Series Vulnerabilities Including Root RCE Flaw

Do Son October 22, 2026

TL;DR Cisco released three security advisories on October 21, 2026, addressing ten distinct Cisco Expressway vulnerabilities across...

Click and Compromise: Cisco Bugs Let Hackers Infiltrate Systems Remotely CVE-2024-20252 and CVE-2024-20254

CVE-2024-20252 and CVE-2024-20254

Click and Compromise: Cisco Bugs Let Hackers Infiltrate Systems Remotely

Do Son February 7, 2024

Recently, Cisco, a leading provider of networking solutions revealed several critical vulnerabilities affecting its Expressway Series collaboration...

CVE-2022-20853 & CVE-2022-20814: High Flaws in Cisco Expressway Series and Cisco TelePresence Video Communication

CVE-2022-20853

CVE-2022-20853 & CVE-2022-20814: High Flaws in Cisco Expressway Series and Cisco TelePresence Video Communication

Do Son October 6, 2022

Cisco on Wednesday informed customers that security updates are available for several of the company’s products, including Cisco...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 27, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 27, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 27, 2026
CVE-2026-109619CVSS 9.2
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not...
CISA KEV📅 Added to KEV: Oct 26, 2026
CVE-2026-109618CVSS 9.2
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request....
CISA KEV📅 Added to KEV: Oct 26, 2026
CVE-2026-106173CVSS 9.8
A improper limitation of a pathname to a restricted directory (\'path traversal\') vulnerability in Fortinet FortiSIEM 7.5.0 may...
Admin intel📅 Updated: Oct 25, 2026
CVE-2014-125133CVSS 8.7
NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2015-20128CVSS 8.8
FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries...
Watchtower Verified📅 Updated: Oct 24, 2026

CVE-2026-109391CVSS 9.2
Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML...
📅 Updated: Oct 27, 2026
CVE-2026-105223CVSS 9.1
maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-data,...
📅 Updated: Oct 27, 2026
CVE-2026-105216CVSS 9.1
go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
📅 Updated: Oct 27, 2026
CVE-2026-105222CVSS 9.1
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer...
📅 Updated: Oct 27, 2026
CVE-2020-37281CVSS 9.2
Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any...
📅 Updated: Oct 27, 2026
CVE-2018-25254CVSS 9.3
NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code...
📅 Updated: Oct 27, 2026
CVE-2026-115557CVSS 9.4
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even...
📅 Updated: Oct 27, 2026
CVE-2026-74014CVSS 9.9
Subscriber Arbitrary File Upload in IT Residence
📅 Updated: Oct 26, 2026