Microsoft Entra ID Agent ID Administrator Role – Service Principal Takeover

Scope: Microsoft Entra ID (All Tenants Using Agent Identities)

Severity: High

Read More

Cisco SD-WAN Authentication Bypass Under Active Exploitation (CVE-2026-20128)

Scope: Cisco SD-WAN Systems

Severity: Red

Read More

Quasar Linux (QLNX) Implant Targeting Developer and DevOps Environments

Scope: Linux Developer Workstations, DevOps Infrastructure (npm, PyPI, GitHub, AWS, Docker, Kubernetes)

Severity: Red

Read More

Apache HTTP Server HTTP/2 Double-Free Vulnerability Enabling DoS and RCE (CVE-2026-23918)

Scope: Apache HTTP Server 2.4.66 (mod_http2 with multi-threaded MPM)

Severity: Red

Read More

MetInfo CMS Unauthenticated PHP Code Injection Under Active Exploitation (CVE-2026-29014)

Scope: MetInfo CMS Versions 7.9, 8.0, and 8.1

Severity:  Red

Read More

Apache ActiveMQ Remote Code Execution via Improper Input Validation (CVE-2026-34197)

Scope: Apache ActiveMQ

Severity: Red

Read More