Robuta

https://kudelskisecurity.com/research/ivanti-epmm-cve-2026-6973-allows-rce-with-admin-credentials-under-active-exploitation Ivanti EPMM CVE-2026-6973 Allows RCE with Admin Credentials, Under Active Exploitation - Kudelski... May 07, 2026 - Kudelski Security Team - under active exploitationivanti epmmcveallowsrce https://nubetia.com/cisa-urges-immediate-patching-of-critical-sitecore-vulnerability-under-active-exploitation/ CISA Urges Immediate Patching of Critical Sitecore Vulnerability Under Active Exploitation - Nubetia Sep 5, 2025 - The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive requiring all Federal Civilian Executive Branch (FCEB) agencies... under active exploitationcisaurgesimmediatepatching https://www.computerweekly.com/news/366629825/Three-new-Citrix-NetScaler-zero-days-under-active-exploitation Three new Citrix NetScaler zero-days under active exploitation | Computer Weekly Citrix patches three new vulnerabilities in its NetScaler lines warning of active zero-day exploitation by an undisclosed threat actor. under active exploitationcitrix netscalerzero dayscomputer weeklythree https://thehackernews.com/2024/11/cisa-alert-active-exploitation-of.html Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active Exploitation Critical flaws in Progress Kemp LoadMaster and VMware vCenter Server are under active exploitation, warns CISA. under active exploitationkemp loadmasterwarningvmwarevcenter https://thehackernews.com/2026/05/palo-alto-pan-os-flaw-under-active.html Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution CVE-2026-0300 exploited via public PAN-OS portal before May 13, 2026 patch, enabling root RCE on firewalls. under active exploitationremote code executionpalo alto https://cert.ug/metinfo-cms-unauthenticated-php-code-injection-under-active-exploitation-cve-2026-29014 MetInfo CMS Unauthenticated PHP Code Injection Under Active Exploitation (CVE-2026-29014) | Uganda... under active exploitationphp codemetinfocmsunauthenticated