News | CSURFACE Threat Sensor

CSURFACE Threat Sensor · 2026-10-14

High-severity RCE vulnerability in Palo Alto Networks PAN-OS management interface

CVE-2026-0322 allows authenticated attackers to execute arbitrary code; restrict access to mitigate risk.

CVE-2026-0322 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-14 ·Highlight

Cisco Secure Email Gateway Vulnerability CVE-2026-76519 Exposes Systems to Remote Attacks

CVE-2026-76519 affects Cisco Secure Email; defenders should apply patches immediately.

CVE-2026-76519 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-14 ·Highlight

CISA Adds AhsayCBS Command Injection Vulnerability to KEV List

CVE-2026-105134 affects AhsayCBS versions up to 10.3.2; upgrade to 10.3.4 to mitigate.

CVE-2026-105134 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-14 ·Highlight

CISA Adds AhsayCBS Improper Authentication Vulnerability to KEV List

CVE-2026-105133 affects AhsayCBS and defenders should upgrade to version 10.3.4 immediately.

CVE-2026-105133 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-14 ·Highlight

CVE-2026-0322: RCE Vulnerability in Palo Alto Networks PAN-OS Management Interface

CVE-2026-0322 allows authenticated attackers to execute arbitrary code on PAN-OS; restrict access to mitigate.

CVE-2026-0322 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-14 ·Highlight

Cisco Secure Email Gateway Vulnerability CVE-2026-76519 Exposes Systems to Remote Attacks

CVE-2026-76519 affects Cisco Secure Email Gateway; defenders should apply patches immediately.

CVE-2026-76519 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-13

CVE-2026-96951: High-Severity Command Injection Vulnerability in Outlook.com

CVE-2026-96951 affects Microsoft Outlook.com; defenders should apply patches immediately.

CVE-2026-96951 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-13

High-severity CVE-2026-104935 affects Ivanti Connect Secure

CVE-2026-104935 allows remote unauthenticated attackers to execute commands; update to version 25.1.3.0 or later.

CVE-2026-104935 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-13 ·Highlight

CISA Adds CVE-2026-96951 to KEV List Amid Exploitation Evidence

CVE-2026-96951 affects Windows and defenders should apply patches immediately.

CVE-2026-96951 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-13 ·Highlight

CISA Adds CVE-2026-104935 to KEV List Amid Exploitation Concerns

CVE-2026-104935 affects Ivanti Connect Secure; update to version 25.1.3.0 or later to mitigate risks.

CVE-2026-104935 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-09 ·Highlight

Exploit for CVE-2026-86218 Targets N-able N-central Remote Code Execution

CVE-2026-86218 allows pre-auth remote code execution in N-able N-central; update to version 2026.3.1.14 or later.

CVE-2026-86218 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-10-08 ·Highlight

Critical Vulnerability in Bricksforge Plugin Allows Unauthenticated File Upload

CVE-2026-85097 affects Bricksforge versions up to 3.1.8.9; update immediately to mitigate risk.

CVE-2026-85097 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-08 ·Highlight

CISA Adds Strapi Vulnerability CVE-2023-22894 to KEV List

CVE-2023-22894 affects Strapi versions up to 4.5.5; users should upgrade to a supported version immediately.

CVE-2023-22894 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-08 ·Highlight

CISA Adds CVE-2021-3199 to KEV List Amid Exploitation Evidence

CVE-2021-3199 allows remote code execution via path traversal; update to ONLYOFFICE Docs 5.6.3 or later.

CVE-2021-3199 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-04

High-severity vulnerability in NetScaler ADC and Gateway requires immediate action

CVE-2026-88779 affects multiple versions of NetScaler ADC and Gateway; defenders should update to patched versions immediately.

CVE-2026-88779 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-04 ·Highlight

Citrix NetScaler Vulnerability CVE-2026-88779 Added to CISA KEV List

CVE-2026-88779 affects Citrix NetScaler products and requires immediate patching.

CVE-2026-88779 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-02 ·Highlight

Exploit for CVE-2026-0770 in Langflow Enables Remote Code Execution

CVE-2026-0770 allows remote code execution in Langflow; defenders should patch immediately.

CVE-2026-0770 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-10-02 ·Highlight

CVE-2026-102489: Zammad Session Fixation Vulnerability Added to CISA KEV List

CVE-2026-102489 affects Zammad versions 6.3.0 to 6.5.4; defenders should update to mitigate risks.

CVE-2026-102489 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-02 ·Highlight

CVE-2026-102490: Zammad Privilege Escalation Vulnerability Discovered

CVE-2026-102490 allows local Zammad users to escalate privileges to root; patch immediately.

CVE-2026-102490 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-10-01 ·Highlight

Critical Path Traversal Vulnerability in Fortinet FortiMail Affects Multiple Versions

CVE-2026-104286 allows unauthenticated attackers to write arbitrary files; update FortiMail immediately.

CVE-2026-104286 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-10-01 ·Highlight

Fortinet FortiMail Path Traversal Vulnerability Added to CISA KEV List

CVE-2026-104286 affects multiple versions of FortiMail; defenders should patch immediately.

CVE-2026-104286 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-30 ·Highlight

Critical CVE-2026-76504 Affects Cisco Catalyst SD-WAN Manager

CVE-2026-76504 allows unauthenticated remote access to admin privileges; defenders should patch immediately.

CVE-2026-76504 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-30 ·Highlight

CISA Adds Cisco Catalyst SD-WAN Manager Vulnerability to KEV List

CVE-2026-76504 allows unauthenticated remote access; update systems immediately.

CVE-2026-76504 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-29

Weaponized Exploit for CVE-2026-48710 in Kludex Starlette Framework

CVE-2026-48710 affects Kludex Starlette; users must upgrade to version 1.0.1 or later immediately.

CVE-2026-48710 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-09-29

Exploit for CVE-2026-42271 Targets LiteLLM Proxy Server

CVE-2026-42271 affects LiteLLM versions 1.74.2 to 1.83.6; upgrade to version 1.83.7 immediately.

CVE-2026-42271 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-09-29 ·Highlight

CVE-2026-86950: Apple Out-of-Bounds Write Vulnerability Added to CISA KEV

CVE-2026-86950 affects multiple Apple products; defenders should apply updates immediately.

CVE-2026-86950 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-28

Apple iOS and iPadOS Vulnerability CVE-2026-86950 Poses High Risk

CVE-2026-86950 affects Apple iOS and iPadOS; users should update to the latest versions immediately.

CVE-2026-86950 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-27 ·Highlight

Critical CVE-2026-88772 Affects Citrix NetScaler ADC and Gateway

CVE-2026-88772 affects Citrix NetScaler ADC and Gateway, and defenders should apply patches immediately.

CVE-2026-88772 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-27 ·Highlight

Citrix NetScaler ADC and Gateway Vulnerability CVE-2026-88771 Exposes Systems to Command Execution

CVE-2026-88771 allows unauthenticated attackers to execute arbitrary commands; update to patched versions immediately.

CVE-2026-88771 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-27 ·Highlight

Citrix NetScaler Vulnerability CVE-2026-88771 Added to CISA KEV List

CVE-2026-88771 affects Citrix NetScaler products and requires immediate patching to prevent exploitation.

CVE-2026-88771 auto-generated csurface-intel kev-addition