News | CSURFACE Threat Sensor

CSURFACE Threat Sensor · 2026-09-10 ·Highlight

CVE-2026-86060: MikroTik RouterOS Flaw Allows Privilege Escalation via SSH

CVE-2026-86060 affects MikroTik RouterOS; update to fixed versions immediately.

CVE-2026-86060 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-10 ·Highlight

CVE-2026-67277: MikroTik RouterOS Vulnerability Exposes Critical Functions

CVE-2026-67277 affects MikroTik RouterOS and requires immediate patching to prevent exploitation.

CVE-2026-67277 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-09 ·Highlight

Critical CVE-2026-87827 Affects KGUARD DVR Devices, Exploited by Mirai Botnets

Defenders should immediately update KGUARD DVR firmware to mitigate CVE-2026-87827.

CVE-2026-87827 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-09

Newfold Plugins Expose Authentication Bypass Vulnerability (CVE-2026-80099)

CVE-2026-80099 allows unauthenticated attackers to bypass authentication in several Newfold plugins; defenders should update immediately.

CVE-2026-80099 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-09

Google Chrome Vulnerability CVE-2026-87491 Allows Remote Code Execution

CVE-2026-87491 affects Google Chrome versions prior to 153.0.8010.36; users should update immediately.

CVE-2026-87491 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-09 ·Highlight

Citrix NetScaler Authentication Bypass Vulnerability Added to CISA KEV List

CVE-2026-19490 affects Citrix NetScaler products; defenders should apply patches immediately.

CVE-2026-19490 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-09 ·Highlight

CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability

CVE-2026-87491 allows remote code execution in Chromium-based browsers; update to version 153.0.8010.36 or later.

CVE-2026-87491 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-09 ·Highlight

CISA Adds CVE-2026-20079 to KEV List for Cisco Firewall Management Vulnerability

CVE-2026-20079 allows unauthenticated remote attackers to bypass authentication; defenders should patch immediately.

CVE-2026-20079 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-09 ·Highlight

Fortinet Buffer Overflow Vulnerability Added to CISA KEV List

CVE-2025-25249 allows attackers to execute unauthorized code via crafted packets; defenders should patch immediately.

CVE-2025-25249 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-08 ·Highlight

Critical vulnerability in ConnectWise ScreenConnect allows unauthorized file transfers

CVE-2026-84869 allows unauthorized file transfers in ConnectWise ScreenConnect; update your systems immediately.

CVE-2026-84869 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-08 ·Highlight

CISA Adds Adobe Commerce Vulnerability CVE-2026-75650 to KEV List

CVE-2026-75650 affects Adobe Commerce and Magento; defenders should patch immediately.

CVE-2026-75650 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-08 ·Highlight

CVE-2026-86218: N-able N-central Static Code Injection Vulnerability

CVE-2026-86218 allows pre-authentication remote code execution; update to version 2026.3.1.14 or later.

CVE-2026-86218 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-07 ·Highlight

Critical CVE-2026-75650 Affects Adobe Commerce, Requires Immediate Action

CVE-2026-75650 affects Adobe Commerce and defenders should apply patches immediately to prevent exploitation.

CVE-2026-75650 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-04

Exploit for CVE-2026-81578 Targets PaperCut MF/NG Management Interface

CVE-2026-81578 affects PaperCut MF and NG; defenders should implement immediate access controls.

CVE-2026-81578 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-09-04 ·Highlight

Exploit for CVE-2026-82078 Found in PaperCut MF/NG Database Connection Utilities

CVE-2026-82078 affects PaperCut MF and NG; users should immediately apply available patches.

CVE-2026-82078 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-09-04 ·Highlight

CISA Adds CVE-2026-85046 to KEV List Amid Exploitation Evidence

CVE-2026-85046 affects Chromium V8; defenders should update to version 152.0.7977.82 or later.

CVE-2026-85046 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-03

Google Chrome Vulnerability CVE-2026-85046 Allows Remote Code Execution

CVE-2026-85046 affects Google Chrome versions prior to 152.0.7977.82; users should update immediately.

CVE-2026-85046 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-03 ·Highlight

Critical CVE-2026-58400 Exposes GeoNetwork to Arbitrary Command Execution

CVE-2026-58400 allows arbitrary command execution in GeoNetwork; upgrade to versions 4.4.12 or 4.2.17 immediately.

CVE-2026-58400 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-02 ·Highlight

Exploit for CVE-2026-48558 Targets SimpleHelp Authentication Bypass

CVE-2026-48558 allows unauthenticated attackers to bypass authentication in SimpleHelp; immediate patching is essential.

CVE-2026-48558 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-09-02 ·Highlight

Critical Privilege Escalation Vulnerability in Amelia Plugin for WordPress

CVE-2026-9055 affects the Amelia plugin for WordPress; update to version 9.6.3 or later immediately.

CVE-2026-9055 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-09-02 ·Highlight

CISA Adds SonicWall SMA1000 SSRF Vulnerability to KEV List

CVE-2026-83548 affects SonicWall SMA1000 Appliances; defenders should apply patches immediately.

CVE-2026-83548 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-02 ·Highlight

CISA Adds BerriAI LiteLLM Improper Authentication Vulnerability to KEV List

CVE-2026-59822 affects BerriAI LiteLLM; users should upgrade to version 1.84.0 immediately.

CVE-2026-59822 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-02 ·Highlight

CISA Adds Sangoma Switchvox SQL Injection Vulnerability to KEV List

CVE-2026-9586 exposes Sangoma Switchvox to SQL injection; defenders should patch immediately.

CVE-2026-9586 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-02 ·Highlight

CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability

CVE-2026-48710 affects Starlette versions prior to 1.0.1; upgrade to mitigate risks.

CVE-2026-48710 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-02 ·Highlight

CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability Exposed

CVE-2026-49869 allows unauthenticated attackers to execute arbitrary workflows; update to versions 1.0.45 or 1.3.21 immediately.

CVE-2026-49869 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-02 ·Highlight

JFrog Artifactory Vulnerability CVE-2026-82329 Exposes Admin Access

CVE-2026-82329 allows unauthenticated attackers to gain administrative privileges; defenders should update configurations immediately.

CVE-2026-82329 auto-generated csurface-intel kev-addition

CSURFACE Threat Sensor · 2026-09-01 ·Highlight

Critical SSRF Vulnerability in SonicWall SMA1000 Requires Immediate Action

CVE-2026-83548 affects SonicWall SMA1000; defenders should apply patches immediately.

CVE-2026-83548 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-08-22 ·Highlight

Critical RCE Vulnerability in IBM Langflow OSS Exploited

CVE-2026-9198 allows unauthenticated attackers to achieve full RCE; defenders should patch immediately.

CVE-2026-9198 auto-generated csurface-intel exploit-public

CSURFACE Threat Sensor · 2026-08-21 ·Highlight

Critical SQL Injection Vulnerability in GeoTools Affects Versions 30.5 to 33.5

CVE-2026-76904 affects GeoTools versions 30.5 to 33.5; defenders should upgrade to patched versions immediately.

CVE-2026-76904 auto-generated csurface-intel new-disclosure

CSURFACE Threat Sensor · 2026-08-21 ·Highlight

Critical Vulnerability in SPIP Allows Remote Code Execution

CVE-2026-77806 affects SPIP versions before 4.4.21; update to the latest version immediately.

CVE-2026-77806 auto-generated csurface-intel new-disclosure