Security ArtifactsDFIR Intelligence
SearchSign inSubscribe

Automated feed

Threat Wire

Aggregated every six hours from CISA KEV, NIST NVD, CISA advisories and trade reporting, then deduplicated and stored. Free to read, and it will stay that way, because these are links to other people's public work. What a membership adds is the analyst layer on top of them.

What “Exploited” means

The entry is on CISA’s Known Exploited Vulnerabilities catalogue, so it is being used against real targets rather than theorised about. A medium-severity KEV outranks a critical nobody has weaponised, and it is the one thing worth filtering on first.

Yesterday4

  1. KEVExploitedcriticalCVE-2026-105133

    Ahsay AhsayCBS: Ahsay AhsayCBS Improper Authentication Vulnerability

    Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.

    Federal remediation due 2026-10-17

  2. KEVExploitedcriticalCVE-2026-0322

    Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability

    Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.

    Federal remediation due 2026-10-17

  3. KEVExploitedcriticalCVE-2026-105134

    Ahsay AhsayCBS: Ahsay AhsayCBS Command Injection Vulnerability

    Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.

    Federal remediation due 2026-10-17

  4. KEVExploitedcriticalCVE-2026-76519

    Cisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal Vulnerability

    Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.

    Federal remediation due 2026-10-17

Every entry links to its original source. Severity is the publisher's own rating where one exists. We don't re-score other people's advisories.