Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root
Affected vendors and products
More on PoC
Other advisories
- MediumCVE-2026-86198PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets
- Lowghsa:GHSA-pg53-p7qp-65cvPocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets
- Highosv:MAL-2026-18378Malicious code in poc-revshell (PyPI)
- HighCVE-2026-118686EspoCRM: ineffizienter regulärer Ausdruck (ReDoS)
- HighCVE-2026-118686EspoCRM: ineffizienter regulärer Ausdruck (ReDoS)
- Not ratedosv:CVE-2026-118686EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex
- Highosv:MAL-2026-18323Malicious code in publish-poc-base (npm)
- Highosv:MAL-2026-18324Malicious code in publish-poc-test3 (npm)
Other news entries
- We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glueNewsThe Register — Security
- Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)NewsSANS ISC Diary
- Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionNewsThe Hacker News
- Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy BackdoorNewsThe Hacker News
- curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code ExecutionNewsThe Hacker News
- Anthropic conjures another threat that doesn't exist yet to stoke fears of AI apocalypseNewsThe Register — Security
- Attackers Target Critical Atlassian Vulnerability Within Hours of PoC PublicationNewsSecurityWeek
- Ransomware fixer claimed he could decrypt files, allegedly defrauded clients insteadNewsThe Register — Security
Source: https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html
ID