#Actively Exploited
All CosmicBytez Labs articles tagged #Actively Exploited, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing
Ivanti confirms active exploitation of a pre-auth spoofing flaw in Connect Secure VPN gateways that lets attackers execute arbitrary commands remotely.
- Security
CVE-2026-42018: JFrog Artifactory Auth Bypass Chained for Admin Takeover
JFrog Artifactory can return an anonymous admin token to unauthenticated callers; attackers are chaining this in the wild. Added to CISA KEV.
- Security
CVE-2026-85706: GitLab Path Traversal Flaw Hit CVSS 10.0, Added to CISA KEV
Unauthenticated attackers can read arbitrary files via GitLab's commits API. Exploited a day after disclosure; now in CISA's KEV catalog.
- Security
Gladinet CentreStack / Triofox Hardcoded AES Key Enables Unauthenticated LFI and RCE Chain
A hardcoded AES cryptographic key in Gladinet CentreStack and Triofox allows unauthenticated attackers to exploit arbitrary local file inclusion, with...
- News
CVE-2026-20230: Cisco Unified CM WebDialer SSRF Now Exploited in the Wild
Cisco Unified Communications Manager and SME are under active attack via CVE-2026-20230, a high-severity SSRF flaw in the WebDialer component that can...
- News
Cisco Customers Encounter Another SD-WAN Zero-Day Under Attack
A seventh actively exploited zero-day in Cisco SD-WAN products this year — CVE-2026-20245 — is under attack with no patch yet available from Cisco.
- Security
CVE-2025-34291: Langflow Origin Validation Error
CISA adds CVE-2025-34291 to the Known Exploited Vulnerabilities catalog — an overly permissive CORS configuration combined with a SameSite=None refresh...
- News
Adobe Patches Actively Exploited Zero-Day That Lingered for Months
Adobe has patched an actively exploited zero-day in Acrobat and Reader that threat actors have been weaponizing via malicious PDF files since at least...
- News
Recent Apache ActiveMQ Vulnerability Exploited in the Wild
CVE-2026-34197, a remote code execution vulnerability in Apache ActiveMQ's Jolokia management API, is being actively exploited in the wild. CISA has added...
- Security
CVE-2026-1340: Ivanti EPMM Code Injection Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the Android File Transfer module allowing unauthenticated remote code...
- News
CISA Flags Actively Exploited n8n RCE Bug as 24,700
CISA added CVE-2025-68613 — a CVSS 9.9 remote code execution flaw in n8n's workflow expression evaluator — to its Known Exploited Vulnerabilities catalog...
- Security
CVE-2025-68613: n8n Remote Code Execution via Improper
CISA adds CVE-2025-68613 to the Known Exploited Vulnerabilities catalog — a CVSS 9.9 flaw in n8n's workflow expression evaluation system that enables...
- Security
CISA Adds Four Critical Vulnerabilities to KEV Catalog
CISA has updated the Known Exploited Vulnerabilities catalog with four actively exploited flaws including Microsoft Office and SmarterMail vulnerabilities.