Emergent Threat Response

CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry

Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)

Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)

CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS

Critical Buffer Overflow in Palo Alto Networks PAN-OS User-ID Authentication Portal (CVE-2026-0300)

CVE-2026-41940: cPanel & WHM Authentication Bypass

CVE-2026-33032: Nginx UI Missing MCP Authentication

CVE-2026-3055: Citrix NetScaler ADC and NetScaler Gateway Out-of-Bounds Read

Critical Cisco Catalyst Vulnerability Exploited in the wild (CVE-2026-20127)

CVE-2026-1731: Critical Unauthenticated Remote Code Execution in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

Critical Ivanti Endpoint Manager Mobile (EPMM) zero-day exploited in the wild (CVE-2026-1281 & CVE-2026-1340)

Multiple Critical SolarWinds Web Help Desk Vulnerabilities: CVE-2025-40551, CVE-2025-40552, CVE-2025-40553, CVE-2025-40554

Ni8mare and N8scape flaws among multiple critical vulnerabilities affecting n8n

MongoBleed CVE-2025-14847: Critical Memory Leak in MongoDB Allowing Attackers to Extract Sensitive Data

CVE-2025-37164: Critical unauthenticated RCE affecting Hewlett Packard Enterprise OneView

Critical vulnerabilities in Fortinet CVE-2025-59718, CVE-2025-59719, CVE-2026-24858 exploited in the wild

React2Shell (CVE-2025-55182) - Critical unauthenticated RCE affecting React Server Components

CVE-2025-64446: Critical Vulnerability in Fortinet FortiWeb Exploited in the Wild

CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild

Stephen Fewer, Christiaan Beek

Microsoft 365 Direct Send Abuse

CVE-2025-20333, CVE-2025-20362, CVE-2025-20363 - Multiple critical vulnerabilities affecting Cisco products