NewsThe Register — Security
The hits keep on coming for Cisco vulnerabilities
Teaser from the source
CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityAffected vendors and products
More on coming
Other advisories
- Not ratedosv:CLEANSTART-2024-ZK60456When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver
- Not ratedosv:CLEANSTART-2024-RP58491missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the server tries to load leas...
- Not ratedosv:CLEANSTART-2025-BS51407With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled
- Not ratedosv:CLEANSTART-2024-MG78066When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver
- HighCVE-2026-99002drm/vmwgfx: validate pitch coming from userspace
- Not ratedosv:CVE-2026-99002drm/vmwgfx: validate pitch coming from userspace
- CriticalCVE-2025-30054CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect pe…
- Not ratedosv:CLEANSTART-2026-SP65833Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a...
Other news entries
- Choosing a WAAP in 2026: 3 questions that separate the shortlistNewsCSO Online
- The Rise of the Threat Operator: How AI Will Redefine Security Operations and CareersNewsThe Hacker News
- UNM Health cyberattack diverts ambulances and closes clinics; BYOD ransomware group claims data theftBreachpwn.watch
- PHP warns admins of two critical flaws, emergency patches coming tomorrowNewsBleepingComputer
- India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1NewsThe Hacker News
- Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacksNewsThe Register — Security
- Growing PQC at the edge belies deeper quantum-readiness challengesNewsCSO Online
- We are fighting phishing at the wrong layerNewsCSO Online
ID