home.social

#cve202620122 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cve202620122, aggregated by home.social.

fetched live
  1. Analyst207 @[email protected] ·

    CISA Warns of Active Cisco SD-WAN Exploits

    The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority warning to federal agencies, ordering them to patch three critical Cisco SD-WAN vulnerabilities within four days after discovering they're being actively exploited by hackers. This urgent directive comes after Cisco patched the flaws in its Catalyst SD-WAN Manager platform.

    osintsights.com/cisa-warns-of-

    #Cisco #Sdwan #Cve202620128 #Cve202620122 #Cisa

    #cisco #sdwan #cve202620128 #cve202620122 #cisa
  2. Analyst207 @[email protected] ·

    CISA Warns of Active Cisco SD-WAN Exploits

    The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority warning to federal agencies, ordering them to patch three critical Cisco SD-WAN vulnerabilities within four days after discovering they're being actively exploited by hackers. This urgent directive comes after Cisco patched the flaws in its Catalyst SD-WAN Manager platform.

    osintsights.com/cisa-warns-of-

    #Cisco #Sdwan #Cve202620128 #Cve202620122 #Cisa

    #cisco #sdwan #cve202620128 #cve202620122 #cisa
  3. ZEN SecDB @[email protected] ·

    🚨 [CISA-2026:0420] CISA Adds 8 Known Exploited Vulnerabilities to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added 8 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2023-27351 (secdb.nttzen.cloud/cve/detail/)
    - Name: PaperCut NG/MF Improper Authentication Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: PaperCut
    - Product: NG/MF
    - Notes: papercut.com/kb/Main/PO-1216-a ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2024-27199 (secdb.nttzen.cloud/cve/detail/)
    - Name: JetBrains TeamCity Relative Path Traversal Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: JetBrains
    - Product: TeamCity
    - Notes: jetbrains.com/privacy-security ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-2749 (secdb.nttzen.cloud/cve/detail/)
    - Name: Kentico Xperience Path Traversal Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Kentico
    - Product: Kentico Xperience
    - Notes: devnet.kentico.com/download/ho ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-32975 (secdb.nttzen.cloud/cve/detail/)
    - Name: Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Quest
    - Product: KACE Systems Management Appliance (SMA)
    - Notes: support.quest.com/kb/4379499/q ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-48700 (secdb.nttzen.cloud/cve/detail/)
    - Name: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Synacor
    - Product: Zimbra Collaboration Suite (ZCS)
    - Notes: wiki.zimbra.com/wiki/Zimbra_Se ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-20122 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manger
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/ CVE-2026-20122

    ⚠️ CVE-2026-20128 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manager
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-20133 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manager
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260420 #cisa20260420 #cve_2023_27351 #cve_2024_27199 #cve_2025_2749 #cve_2025_32975 #cve_2025_48700 #cve_2026_20122 #cve_2026_20128 #cve_2026_20133 #cve202327351 #cve202427199 #cve20252749 #cve202532975 #cve202548700 #cve202620122 #cve202620128 #cve202620133

    #secdb #infosec #cve #cisa_kev #cisa_20260420 #cisa20260420
  4. ZEN SecDB @[email protected] ·

    🚨 [CISA-2026:0420] CISA Adds 8 Known Exploited Vulnerabilities to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added 8 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2023-27351 (secdb.nttzen.cloud/cve/detail/)
    - Name: PaperCut NG/MF Improper Authentication Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: PaperCut
    - Product: NG/MF
    - Notes: papercut.com/kb/Main/PO-1216-a ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2024-27199 (secdb.nttzen.cloud/cve/detail/)
    - Name: JetBrains TeamCity Relative Path Traversal Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: JetBrains
    - Product: TeamCity
    - Notes: jetbrains.com/privacy-security ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-2749 (secdb.nttzen.cloud/cve/detail/)
    - Name: Kentico Xperience Path Traversal Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Kentico
    - Product: Kentico Xperience
    - Notes: devnet.kentico.com/download/ho ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-32975 (secdb.nttzen.cloud/cve/detail/)
    - Name: Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Quest
    - Product: KACE Systems Management Appliance (SMA)
    - Notes: support.quest.com/kb/4379499/q ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-48700 (secdb.nttzen.cloud/cve/detail/)
    - Name: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Synacor
    - Product: Zimbra Collaboration Suite (ZCS)
    - Notes: wiki.zimbra.com/wiki/Zimbra_Se ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-20122 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manger
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/ CVE-2026-20122

    ⚠️ CVE-2026-20128 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manager
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-20133 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manager
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260420 #cisa20260420 #cve_2023_27351 #cve_2024_27199 #cve_2025_2749 #cve_2025_32975 #cve_2025_48700 #cve_2026_20122 #cve_2026_20128 #cve_2026_20133 #cve202327351 #cve202427199 #cve20252749 #cve202532975 #cve202548700 #cve202620122 #cve202620128 #cve202620133

    #secdb #infosec #cve #cisa_kev #cisa_20260420 #cisa20260420
  5. ZEN SecDB @[email protected] ·

    🚨 [CISA-2026:0420] CISA Adds 8 Known Exploited Vulnerabilities to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added 8 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2023-27351 (secdb.nttzen.cloud/cve/detail/)
    - Name: PaperCut NG/MF Improper Authentication Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: PaperCut
    - Product: NG/MF
    - Notes: papercut.com/kb/Main/PO-1216-a ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2024-27199 (secdb.nttzen.cloud/cve/detail/)
    - Name: JetBrains TeamCity Relative Path Traversal Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: JetBrains
    - Product: TeamCity
    - Notes: jetbrains.com/privacy-security ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-2749 (secdb.nttzen.cloud/cve/detail/)
    - Name: Kentico Xperience Path Traversal Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Kentico
    - Product: Kentico Xperience
    - Notes: devnet.kentico.com/download/ho ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-32975 (secdb.nttzen.cloud/cve/detail/)
    - Name: Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Quest
    - Product: KACE Systems Management Appliance (SMA)
    - Notes: support.quest.com/kb/4379499/q ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-48700 (secdb.nttzen.cloud/cve/detail/)
    - Name: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Synacor
    - Product: Zimbra Collaboration Suite (ZCS)
    - Notes: wiki.zimbra.com/wiki/Zimbra_Se ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-20122 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manger
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/ CVE-2026-20122

    ⚠️ CVE-2026-20128 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manager
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-20133 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manager
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260420 #cisa20260420 #cve_2023_27351 #cve_2024_27199 #cve_2025_2749 #cve_2025_32975 #cve_2025_48700 #cve_2026_20122 #cve_2026_20128 #cve_2026_20133 #cve202327351 #cve202427199 #cve20252749 #cve202532975 #cve202548700 #cve202620122 #cve202620128 #cve202620133

    #cve202620133 #cve202620128 #cve202620122 #cve202548700 #cve202532975 #cve20252749
  6. ZEN SecDB @[email protected] ·

    🚨 [CISA-2026:0420] CISA Adds 8 Known Exploited Vulnerabilities to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added 8 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2023-27351 (secdb.nttzen.cloud/cve/detail/)
    - Name: PaperCut NG/MF Improper Authentication Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: PaperCut
    - Product: NG/MF
    - Notes: papercut.com/kb/Main/PO-1216-a ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2024-27199 (secdb.nttzen.cloud/cve/detail/)
    - Name: JetBrains TeamCity Relative Path Traversal Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: JetBrains
    - Product: TeamCity
    - Notes: jetbrains.com/privacy-security ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-2749 (secdb.nttzen.cloud/cve/detail/)
    - Name: Kentico Xperience Path Traversal Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Kentico
    - Product: Kentico Xperience
    - Notes: devnet.kentico.com/download/ho ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-32975 (secdb.nttzen.cloud/cve/detail/)
    - Name: Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Quest
    - Product: KACE Systems Management Appliance (SMA)
    - Notes: support.quest.com/kb/4379499/q ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-48700 (secdb.nttzen.cloud/cve/detail/)
    - Name: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Synacor
    - Product: Zimbra Collaboration Suite (ZCS)
    - Notes: wiki.zimbra.com/wiki/Zimbra_Se ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-20122 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manger
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/ CVE-2026-20122

    ⚠️ CVE-2026-20128 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manager
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-20133 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
    - Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Catalyst SD-WAN Manager
    - Notes: CISA Mitigation Instructions: cisa.gov/news-events/directive ; cisa.gov/news-events/directive ; sec.cloudapps.cisco.com/securi ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260420 #cisa20260420 #cve_2023_27351 #cve_2024_27199 #cve_2025_2749 #cve_2025_32975 #cve_2025_48700 #cve_2026_20122 #cve_2026_20128 #cve_2026_20133 #cve202327351 #cve202427199 #cve20252749 #cve202532975 #cve202548700 #cve202620122 #cve202620128 #cve202620133

    #secdb #infosec #cve #cisa_kev #cisa_20260420 #cisa20260420