Advisories https://cert.ug/index.php/ en Progress LoadMaster Command Injection Under Active Mass Exploitation from 792 Attack IPs (CVE-2026-8037) https://cert.ug/index.php/progress-loadmaster-command-injection-under-active-mass-exploitation-792-attack-ips-cve-2026-8037 <span property="schema:name">Progress LoadMaster Command Injection Under Active Mass Exploitation from 792 Attack IPs (CVE-2026-8037)</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-25T04:39:53+00:00">Tue, 08/25/2026 - 06:39</span> Tue, 25 Aug 2026 04:39:53 +0000 conradNITA 417 at https://cert.ug https://cert.ug/index.php/progress-loadmaster-command-injection-under-active-mass-exploitation-792-attack-ips-cve-2026-8037#comments Microsoft Defender ShieldBreak CISA KEV Deadline Today as Lazarus Group Exploitation Confirmed (CVE-2026-69414) https://cert.ug/index.php/microsoft-defender-shieldbreak-cisa-kev-deadline-today-lazarus-group-exploitation-confirmed-cve <span property="schema:name">Microsoft Defender ShieldBreak CISA KEV Deadline Today as Lazarus Group Exploitation Confirmed (CVE-2026-69414)</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-25T04:37:44+00:00">Tue, 08/25/2026 - 06:37</span> Tue, 25 Aug 2026 04:37:44 +0000 conradNITA 416 at https://cert.ug https://cert.ug/index.php/microsoft-defender-shieldbreak-cisa-kev-deadline-today-lazarus-group-exploitation-confirmed-cve#comments 14,530 Dahua CCTV Cameras and NVRs Compromised in Active Campaign Using Authentication Bypass Flaws https://cert.ug/index.php/14530-dahua-cctv-cameras-and-nvrs-compromised-active-campaign-using-authentication-bypass-flaws <span property="schema:name">14,530 Dahua CCTV Cameras and NVRs Compromised in Active Campaign Using Authentication Bypass Flaws</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-25T04:36:04+00:00">Tue, 08/25/2026 - 06:36</span> Tue, 25 Aug 2026 04:36:04 +0000 conradNITA 415 at https://cert.ug https://cert.ug/index.php/14530-dahua-cctv-cameras-and-nvrs-compromised-active-campaign-using-authentication-bypass-flaws#comments Adobe Commerce and Magento Unauthenticated Customer Account Hijacking Now Under Active Exploitation (CVE-2026-71362) https://cert.ug/index.php/adobe-commerce-and-magento-unauthenticated-customer-account-hijacking-now-under-active-exploitation <span property="schema:name">Adobe Commerce and Magento Unauthenticated Customer Account Hijacking Now Under Active Exploitation (CVE-2026-71362)</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-20T10:47:20+00:00">Thu, 08/20/2026 - 12:47</span> Thu, 20 Aug 2026 10:47:20 +0000 conradNITA 414 at https://cert.ug CISA Orders Emergency Patching of Four Critical Flaws Including Microsoft IKE, SharePoint, VMware, and macOS by August 21 (CVE-2026-33824 and Others) https://cert.ug/index.php/cisa-orders-emergency-patching-four-critical-flaws-including-microsoft-ike-sharepoint-vmware-and <span property="schema:name">CISA Orders Emergency Patching of Four Critical Flaws Including Microsoft IKE, SharePoint, VMware, and macOS by August 21 (CVE-2026-33824 and Others)</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-20T10:46:34+00:00">Thu, 08/20/2026 - 12:46</span> Thu, 20 Aug 2026 10:46:34 +0000 conradNITA 413 at https://cert.ug Microsoft SharePoint Complete Unauthenticated RCE Chain Now Fully Patched Across Two Patch Tuesdays (CVE-2026-55040 / CVE-2026-63520) https://cert.ug/index.php/microsoft-sharepoint-complete-unauthenticated-rce-chain-now-fully-patched-across-two-patch-tuesdays <span property="schema:name">Microsoft SharePoint Complete Unauthenticated RCE Chain Now Fully Patched Across Two Patch Tuesdays (CVE-2026-55040 / CVE-2026-63520)</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-19T11:16:40+00:00">Wed, 08/19/2026 - 13:16</span> Wed, 19 Aug 2026 11:16:40 +0000 conradNITA 412 at https://cert.ug Microsoft Officially Assigns CVE to ShieldBreak Zero-Day as Patch Development Confirmed (CVE-2026-69414) https://cert.ug/index.php/microsoft-officially-assigns-cve-shieldbreak-zero-day-patch-development-confirmed-cve-2026-69414 <span property="schema:name">Microsoft Officially Assigns CVE to ShieldBreak Zero-Day as Patch Development Confirmed (CVE-2026-69414)</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-19T11:11:11+00:00">Wed, 08/19/2026 - 13:11</span> Wed, 19 Aug 2026 11:11:11 +0000 conradNITA 411 at https://cert.ug Forminator Forms WordPress Plugin Critical RCE Flaw Affects 600,000 Active Installations (CVE-2026-15748) https://cert.ug/index.php/forminator-forms-wordpress-plugin-critical-rce-flaw-affects-600000-active-installations-cve-2026 <span property="schema:name">Forminator Forms WordPress Plugin Critical RCE Flaw Affects 600,000 Active Installations (CVE-2026-15748)</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-18T19:36:47+00:00">Tue, 08/18/2026 - 21:36</span> Tue, 18 Aug 2026 19:36:47 +0000 conradNITA 410 at https://cert.ug Zoom Workplace for Windows Critical Authentication Flaw Enables Unauthenticated Account Takeover (CVE-2026-53412) https://cert.ug/index.php/zoom-workplace-windows-critical-authentication-flaw-enables-unauthenticated-account-takeover-cve <span property="schema:name">Zoom Workplace for Windows Critical Authentication Flaw Enables Unauthenticated Account Takeover (CVE-2026-53412)</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-18T19:36:19+00:00">Tue, 08/18/2026 - 21:36</span> Tue, 18 Aug 2026 19:36:19 +0000 conradNITA 409 at https://cert.ug GitLab CE and EE Emergency Out-of-Band Patch Addresses Critical Unauthenticated Data Deletion Flaw (CVE-2026-19478) https://cert.ug/index.php/gitlab-ce-and-ee-emergency-out-band-patch-addresses-critical-unauthenticated-data-deletion-flaw-cve <span property="schema:name">GitLab CE and EE Emergency Out-of-Band Patch Addresses Critical Unauthenticated Data Deletion Flaw (CVE-2026-19478)</span> <span rel="schema:author"><span lang="" about="/index.php/user/3" typeof="schema:Person" property="schema:name" datatype="">conradNITA</span></span> <span property="schema:dateCreated" content="2026-08-18T19:35:49+00:00">Tue, 08/18/2026 - 21:35</span> Tue, 18 Aug 2026 19:35:49 +0000 conradNITA 408 at https://cert.ug