Cybersecurity articles tagged #CISA KEV on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/cve-2026-83548-sonicwall-sma1000-ssrf-under-active-exploitationhttps://runtimerebel.com/blog/cve-2026-83548-sonicwall-sma1000-ssrf-under-active-exploitationA critical server-side request forgery (SSRF) vulnerability, CVE-2026-83548, in SonicWall SMA1000 Appliances is under active exploitation.Wed, 02 Sep 2026 19:13:21 GMTSonicWallSMA1000SSRFVulnerabilityCISA KEVhttps://runtimerebel.com/blog/cve-2026-9586-sangoma-switchvox-rce-via-sql-injectionhttps://runtimerebel.com/blog/cve-2026-9586-sangoma-switchvox-rce-via-sql-injectionSangoma Switchvox is affected by CVE-2026-9586, an unauthenticated remote SQL injection vulnerability enabling RCE, with active exploitation confirmed.Wed, 02 Sep 2026 19:12:29 GMTCVE-2026-9586Sangoma SwitchvoxSQL InjectionRemote Code ExecutionCISA KEVhttps://runtimerebel.com/blog/cve-2026-49869-kestra-oss-os-command-injection-exploitedhttps://runtimerebel.com/blog/cve-2026-49869-kestra-oss-os-command-injection-exploitedCISA has added CVE-2026-49869, an OS command injection in Kestra OSS, to its KEV catalog, confirming active exploitation by unauthenticated attackers.Wed, 02 Sep 2026 19:11:22 GMTCVE-2026-49869Kestra OSSOS Command InjectionCISA KEVRemote Code Executionhttps://runtimerebel.com/blog/cve-2026-59822-berriai-litellm-authentication-bypasshttps://runtimerebel.com/blog/cve-2026-59822-berriai-litellm-authentication-bypassBerriAI LiteLLM is vulnerable to an improper authentication flaw (CVE-2026-59822) actively exploited to bypass authentication.Wed, 02 Sep 2026 19:09:55 GMTCVE-2026-59822BerriAI LiteLLMAuthentication BypassCISA KEVImproper Authenticationhttps://runtimerebel.com/blog/cve-2021-23758-ajax-net-rce-via-deserialization-of-untrusted-datahttps://runtimerebel.com/blog/cve-2021-23758-ajax-net-rce-via-deserialization-of-untrusted-dataCVE-2021-23758 in Ajax.NET Professional allows remote code execution via untrusted data deserialization, with CISA confirming active exploitation.Tue, 01 Sep 2026 02:58:41 GMTCVE-2021-23758Ajax NET ProfessionalDeserializationRemote Code ExecutionCISA KEVhttps://runtimerebel.com/blog/cve-2026-66384-jfrog-artifactory-path-traversal-exploithttps://runtimerebel.com/blog/cve-2026-66384-jfrog-artifactory-path-traversal-exploitCISA warns of active exploitation of CVE-2026-66384 in JFrog Artifactory, allowing authenticated users to write data outside intended paths. Patch immediately.Tue, 01 Sep 2026 02:58:16 GMTCVE-2026-66384JFrog ArtifactoryPath TraversalCISA KEVSupply Chain Attackhttps://runtimerebel.com/blog/cve-2026-53362-linux-kernel-ipv6-privilege-escalationhttps://runtimerebel.com/blog/cve-2026-53362-linux-kernel-ipv6-privilege-escalationCISA adds CVE-2026-53362 to KEV, confirming active exploitation of a Linux Kernel privilege escalation vulnerability via IPv6. Patch now.Tue, 01 Sep 2026 02:57:10 GMTCVE-2026-53362Linux KernelPrivilege EscalationIPv6CISA KEVhttps://runtimerebel.com/blog/cve-2026-60004-gitea-code-injection-under-active-exploitationhttps://runtimerebel.com/blog/cve-2026-60004-gitea-code-injection-under-active-exploitationCISA confirms active exploitation of CVE-2026-60004, a Gitea code injection vulnerability allowing shell command execution with repository write access.Wed, 26 Aug 2026 00:45:21 GMTRemote Code ExecutionCISA KEVCVE-2026-60004GiteaCode Injectionhttps://runtimerebel.com/blog/cve-2026-72529-critical-rce-in-trueconf-server-via-missing-authhttps://runtimerebel.com/blog/cve-2026-72529-critical-rce-in-trueconf-server-via-missing-authCISA warns of active exploitation of CVE-2026-72529 in TrueConf Server, allowing remote attackers to execute arbitrary scripts via port 4307/TCP.Fri, 21 Aug 2026 00:48:00 GMTRemote Code ExecutionCISA KEVCVE-2026-72529TrueConf ServerMissing Authenticationhttps://runtimerebel.com/blog/cve-2026-72530-trueconf-server-remote-code-executionhttps://runtimerebel.com/blog/cve-2026-72530-trueconf-server-remote-code-executionCISA confirms active exploitation of CVE-2026-72530, a TrueConf Server code injection flaw leading to remote code execution. Immediate patching is critical.Fri, 21 Aug 2026 00:47:12 GMTRemote Code ExecutionCISA KEVVulnerability ManagementCVE-2026-72530TrueConf Serverhttps://runtimerebel.com/blog/cve-2026-33824-microsoft-ike-double-free-rce-exploithttps://runtimerebel.com/blog/cve-2026-33824-microsoft-ike-double-free-rce-exploitCISA confirms active exploitation of CVE-2026-33824 in Microsoft Internet Key Exchange (IKE) Service Extensions, enabling remote code execution.Wed, 19 Aug 2026 00:43:34 GMTRemote Code ExecutionCISA KEVCVE-2026-33824Microsoft IKEDouble Freehttps://runtimerebel.com/blog/cve-2025-62593-ray-project-ray-rce-exploited-in-wildhttps://runtimerebel.com/blog/cve-2025-62593-ray-project-ray-rce-exploited-in-wildCISA confirms active exploitation of CVE-2025-62593, a critical code injection vulnerability in Ray-Project Ray allowing remote code execution. Developers are targeted.Mon, 17 Aug 2026 16:20:50 GMTRemote Code ExecutionRCECISA KEVCVE-2025-62593Ray Projecthttps://runtimerebel.com/blog/cve-2026-72898-metabase-sql-injection-active-exploitationhttps://runtimerebel.com/blog/cve-2026-72898-metabase-sql-injection-active-exploitationCISA adds Metabase CVE-2026-72898 SQL injection to its KEV catalog, enabling unauthenticated remote attackers to gain admin access.Wed, 12 Aug 2026 01:08:08 GMTCVE-2026-72898MetabaseSQL InjectionCISA KEVRemote Code Executionhttps://runtimerebel.com/blog/cve-2026-20349-cisco-asa-ftd-dos-vulnerability-under-active-exploithttps://runtimerebel.com/blog/cve-2026-20349-cisco-asa-ftd-dos-vulnerability-under-active-exploitCISA warns of active exploitation of CVE-2026-20349, a heap inspection vulnerability causing DoS in Cisco ASA and FTD devices.Wed, 12 Aug 2026 01:07:05 GMTCisco ASADenial of ServiceCISA KEVCVE-2026-20349Cisco FTDhttps://runtimerebel.com/blog/cve-2026-63077-jetbrains-teamcity-rce-via-deserializationhttps://runtimerebel.com/blog/cve-2026-63077-jetbrains-teamcity-rce-via-deserializationCISA adds CVE-2026-63077 to KEV, indicating active exploitation of a JetBrains TeamCity deserialization RCE vulnerability.Tue, 11 Aug 2026 16:54:33 GMTCVE-2026-63077JetBrains TeamCityDeserializationRemote Code ExecutionCISA KEVhttps://runtimerebel.com/blog/cve-2026-8037-progress-loadmaster-command-injection-rcehttps://runtimerebel.com/blog/cve-2026-8037-progress-loadmaster-command-injection-rceProgress LoadMaster command injection (CVE-2026-8037) allows unauthenticated attackers to execute arbitrary commands. Active exploitation confirmed by CISA.Sat, 08 Aug 2026 01:04:01 GMTCommand InjectionRemote Code ExecutionCISA KEVCVE-2026-8037Progress LoadMasterhttps://runtimerebel.com/blog/cisa-warns-actively-exploited-langflow-n-central-and-tomcat-vulnerabilitieshttps://runtimerebel.com/blog/cisa-warns-actively-exploited-langflow-n-central-and-tomcat-vulnerabilitiesCISA warns federal agencies and organizations about active exploitation of critical vulnerabilities in IBM Langflow, N-able N-central, and Apache Tomcat.Wed, 05 Aug 2026 10:27:25 GMTCISA KEVCVE-2026-9198CVE-2026-18556CVE-2026-18577CVE-2026-34486https://runtimerebel.com/blog/cve-2026-18556-n-able-n-central-authentication-bypass-actively-exploitedhttps://runtimerebel.com/blog/cve-2026-18556-n-able-n-central-authentication-bypass-actively-exploitedCISA added CVE-2026-18556 to its KEV catalog, confirming active exploitation of an N-able N-central authentication bypass vulnerability.Tue, 04 Aug 2026 17:33:39 GMTAuthentication BypassCISA KEVExploitationCVE-2026-18556N Able N Centralhttps://runtimerebel.com/blog/cve-2026-50522-sharepoint-rce-via-deserialization-patch-nowhttps://runtimerebel.com/blog/cve-2026-50522-sharepoint-rce-via-deserialization-patch-nowCISA confirmed active exploitation of CVE-2026-50522 in Microsoft SharePoint. Attackers leverage a deserialization vulnerability to execute code remotely. Patch…Sun, 02 Aug 2026 16:49:14 GMTCVE-2026-50522Microsoft SharePointDeserializationRemote Code ExecutionCISA KEVhttps://runtimerebel.com/blog/cve-2026-60137-wordpress-core-sql-injection-to-rce-patch-nowhttps://runtimerebel.com/blog/cve-2026-60137-wordpress-core-sql-injection-to-rce-patch-nowCISA warns of active exploitation for CVE-2026-60137, a WordPress Core SQL Injection vulnerability chaining to RCE for unauthenticated attackers.Sun, 02 Aug 2026 02:55:48 GMTWordPressSQL InjectionRCECISA KEVCVE-2026-60137https://runtimerebel.com/blog/cve-2026-16232-check-point-smartconsole-admin-bypass-via-auth-flawhttps://runtimerebel.com/blog/cve-2026-16232-check-point-smartconsole-admin-bypass-via-auth-flawCISA warns of active exploitation for CVE-2026-16232, an improper authentication vulnerability in Check Point SmartConsole allowing unauthenticated admin access…Sun, 02 Aug 2026 02:54:04 GMTCISA KEVCVE-2026-16232Check Point SmartConsoleImproper AuthenticationAdmin Bypasshttps://runtimerebel.com/blog/cve-2025-68686-fortinet-fortios-patch-bypass-for-post-exploit-persistencehttps://runtimerebel.com/blog/cve-2025-68686-fortinet-fortios-patch-bypass-for-post-exploit-persistenceCISA warns of active exploitation of CVE-2025-68686 in Fortinet FortiOS, allowing attackers to bypass a patch for post-exploit persistence and expose sensitive data.Fri, 31 Jul 2026 10:43:21 GMTCVE-2025-68686FortinetFortiosInformation ExposurePatch BypassPost ExploitationCISA KEVCWE-200https://runtimerebel.com/blog/cve-2026-20316-cisco-secure-fmc-hard-coded-password-vulnerabilityhttps://runtimerebel.com/blog/cve-2026-20316-cisco-secure-fmc-hard-coded-password-vulnerabilityCISA confirms active exploitation of CVE-2026-20316, a hard-coded password vulnerability in Cisco Secure Firewall Management Center.Fri, 31 Jul 2026 10:42:09 GMTCVE-2026-20316Cisco Secure Firewall Management CenterHard Coded PasswordAuthentication BypassCISA KEVhttps://runtimerebel.com/blog/cisco-fmc-cve-2026-20316-static-credentials-actively-exploitedhttps://runtimerebel.com/blog/cisco-fmc-cve-2026-20316-static-credentials-actively-exploitedCISA adds CVE-2026-20316 to its Known Exploited Vulnerabilities catalog following active exploitation of static credentials in Cisco Firewall Management Center.Thu, 30 Jul 2026 06:29:42 GMTCVE-2026-20316CiscoFirewall Management CenterCISA KEVStatic Credentialshttps://runtimerebel.com/blog/cve-2026-58644-sharepoint-rce-zero-day-exploited-in-the-wildhttps://runtimerebel.com/blog/cve-2026-58644-sharepoint-rce-zero-day-exploited-in-the-wildCISA adds CVE-2026-58644, a critical Microsoft SharePoint Server deserialization RCE vulnerability with a CVSS 9.8, to its Known Exploited Vulnerabilities catalog.Fri, 17 Jul 2026 09:58:24 GMTCVE-2026-58644SharePointMicrosoftCISA KEVRCEhttps://runtimerebel.com/blog/microsoft-sharepoint-rce-via-cve-2024-38094-mitigation-guidehttps://runtimerebel.com/blog/microsoft-sharepoint-rce-via-cve-2024-38094-mitigation-guideCISA adds three exploited SharePoint vulnerabilities to the KEV catalog, including CVE-2024-38094. Learn how to detect and mitigate these critical RCE flaws.Wed, 15 Jul 2026 17:22:02 GMTCVE-2024-38094CVE-2024-43461CVE-2023-24955SharePointCISA KEVhttps://runtimerebel.com/blog/cve-2023-29357-cisa-warns-of-active-sharepoint-exploit-chainhttps://runtimerebel.com/blog/cve-2023-29357-cisa-warns-of-active-sharepoint-exploit-chainCISA urges immediate patching of CVE-2023-29357 and CVE-2023-24955 in SharePoint Server due to active exploitation for remote code execution.Wed, 15 Jul 2026 10:05:47 GMTCVE-2023-29357CVE-2023-24955Microsoft SharePointCISA KEVhttps://runtimerebel.com/blog/joomla-rce-via-cve-2026-48939-and-cve-2026-38294-mitigation-guidehttps://runtimerebel.com/blog/joomla-rce-via-cve-2026-48939-and-cve-2026-38294-mitigation-guideCISA adds CVE-2026-48939 and CVE-2026-38294 to KEV after zero-day exploitation of Joomla iCagenda and Balbooa Forms extensions. Patch immediately.Mon, 13 Jul 2026 11:18:48 GMTCVE-2026-48939CVE-2026-38294JoomlaiCagendaBalbooa FormsCISA KEVhttps://runtimerebel.com/blog/cve-2024-37014-cisa-orders-federal-agencies-to-patch-langflowhttps://runtimerebel.com/blog/cve-2024-37014-cisa-orders-federal-agencies-to-patch-langflowCISA added CVE-2024-37014, a critical authentication bypass in the Langflow AI framework, to its KEV catalog following reports of active exploitation.Wed, 08 Jul 2026 10:23:08 GMTCVE-2024-37014LangflowCISA KEVAI Securityhttps://runtimerebel.com/blog/cve-2026-48282-adobe-coldfusion-path-traversal-rce-patch-nowhttps://runtimerebel.com/blog/cve-2026-48282-adobe-coldfusion-path-traversal-rce-patch-nowCISA adds actively exploited Adobe ColdFusion vulnerability [CVE-2026-48282] to KEV catalog, warning of critical remote code execution risks.Wed, 08 Jul 2026 06:30:23 GMTCVE-2026-48282Adobe ColdFusionPath TraversalRCECISA KEVActive Exploitationhttps://runtimerebel.com/blog/cve-2026-45659-sharepoint-rce-exploitation-mitigation-guidehttps://runtimerebel.com/blog/cve-2026-45659-sharepoint-rce-exploitation-mitigation-guideCISA adds CVE-2026-45659, a high-severity SharePoint Server deserialization flaw, to KEV catalog after confirmed active exploitation by threat actors.Thu, 02 Jul 2026 07:34:50 GMTCVE-2026-45659Microsoft SharePointDeserializationCISA KEVRemote Code Executionhttps://runtimerebel.com/blog/windows-bluehammer-flaw-exploited-by-ransomware-gangs-patch-nowhttps://runtimerebel.com/blog/windows-bluehammer-flaw-exploited-by-ransomware-gangs-patch-nowCISA warns that ransomware gangs are now exploiting the BlueHammer privilege escalation vulnerability in Microsoft Defender to bypass security controls.Tue, 30 Jun 2026 09:16:59 GMTMicrosoft DefenderBlueHammerCISA KEVRansomwarePrivilege Escalationhttps://runtimerebel.com/blog/cve-2022-25247-ptc-windchill-rce-exploited-in-the-wildhttps://runtimerebel.com/blog/cve-2022-25247-ptc-windchill-rce-exploited-in-the-wildCISA warns of active exploitation of CVE-2022-25247, an RCE flaw in PTC Windchill PLM software. Learn how to detect and mitigate this critical threat.Fri, 26 Jun 2026 09:18:55 GMTCVE-2022-25247PTC WindchillRCECISA KEVManufacturing Securityhttps://runtimerebel.com/blog/oracle-peoplesoft-cve-2026-35273-exploit-cisa-kev-mitigation-guidehttps://runtimerebel.com/blog/oracle-peoplesoft-cve-2026-35273-exploit-cisa-kev-mitigation-guideCISA adds CVE-2026-35273 in Oracle PeopleSoft to its KEV catalog. Learn how to mitigate this missing authentication vulnerability and protect enterprise systems.Sat, 13 Jun 2026 09:15:30 GMTCVE-2026-35273Oracle PeopleSoftCISA KEVVulnerability ManagementPeopleToolshttps://runtimerebel.com/blog/ivanti-sentry-cve-2023-35081-cisa-issues-urgent-3-day-patch-mandatehttps://runtimerebel.com/blog/ivanti-sentry-cve-2023-35081-cisa-issues-urgent-3-day-patch-mandateCISA adds CVE-2023-35081 to its KEV catalog, ordering federal agencies to patch Ivanti Sentry path traversal flaws to prevent remote code execution.Fri, 12 Jun 2026 09:33:30 GMTIvanti SentryCVE-2023-35081CISA KEVPath TraversalRce Chainhttps://runtimerebel.com/blog/cisa-adds-cve-2026-42271-and-cve-2026-50751-to-kev-cataloghttps://runtimerebel.com/blog/cisa-adds-cve-2026-42271-and-cve-2026-50751-to-kev-catalogCISA warns of active exploitation involving BerriAI LiteLLM and Check Point Security Gateways. Learn how to mitigate these critical security flaws.Tue, 09 Jun 2026 09:18:40 GMTCVE-2026-42271CVE-2026-50751CISA KEVBerriAICheck PointCommand Injectionhttps://runtimerebel.com/blog/cve-2026-42271-berriai-litellm-rce-exploited-in-the-wildhttps://runtimerebel.com/blog/cve-2026-42271-berriai-litellm-rce-exploited-in-the-wildCISA warns of active exploitation of CVE-2026-42271 in BerriAI LiteLLM. This command injection flaw allows attackers to achieve RCE and compromise AI proxies.Tue, 09 Jun 2026 09:15:35 GMTCVE-2026-42271LiteLLMBerriAICISA KEVRCECommand Injectionhttps://runtimerebel.com/blog/solarwinds-serv-u-dos-vulnerability-cve-2026-28318-added-to-cisa-kevhttps://runtimerebel.com/blog/solarwinds-serv-u-dos-vulnerability-cve-2026-28318-added-to-cisa-kevCISA adds CVE-2026-28318 to its KEV catalog following active exploitation of a high-severity DoS vulnerability in SolarWinds Serv-U file server software.Sat, 06 Jun 2026 08:59:14 GMTSolarWindsServ UCVE-2026-28318CISA KEVDoShttps://runtimerebel.com/blog/cve-2026-28318-solarwinds-serv-u-uncontrolled-resource-consumption-exploithttps://runtimerebel.com/blog/cve-2026-28318-solarwinds-serv-u-uncontrolled-resource-consumption-exploitCISA warns of active exploitation of CVE-2026-28318, an uncontrolled resource consumption flaw in SolarWinds Serv-U. Immediate patching is critical for all organizations.Fri, 05 Jun 2026 20:42:27 GMTCVE-2026-28318SolarWinds Serv UUncontrolled Resource ConsumptionCISA KEVhttps://runtimerebel.com/blog/cve-2024-28995-solarwinds-serv-u-exploit-leads-to-server-crasheshttps://runtimerebel.com/blog/cve-2024-28995-solarwinds-serv-u-exploit-leads-to-server-crashesCISA warns of active exploitation of SolarWinds Serv-U CVE-2024-28995. Attackers are leveraging this directory traversal flaw to crash vulnerable servers.Fri, 05 Jun 2026 20:41:11 GMTCVE-2024-28995SolarWindsServ UCISA KEVDirectory Traversalhttps://runtimerebel.com/blog/cve-2026-45247-magento-mirasvit-cache-warmer-rce-exploit-analysishttps://runtimerebel.com/blog/cve-2026-45247-magento-mirasvit-cache-warmer-rce-exploit-analysisCISA adds CVE-2026-45247, a critical Mirasvit Cache Warmer RCE flaw impacting Magento sites, to the KEV catalog following reports of active exploitation.Thu, 04 Jun 2026 09:25:50 GMTCVE-2026-45247MagentoMirasvitRCECISA KEVDeserializationhttps://runtimerebel.com/blog/cve-2026-45247-mirasvit-full-page-cache-warmer-exploited-patch-nowhttps://runtimerebel.com/blog/cve-2026-45247-mirasvit-full-page-cache-warmer-exploited-patch-nowCISA adds CVE-2026-45247, a deserialization vulnerability in Mirasvit Full Page Cache Warmer for Magento, to the KEV catalog after reports of active exploitation.Wed, 03 Jun 2026 17:47:53 GMTCVE-2026-45247MirasvitMagentoCISA KEVRCEDeserializationhttps://runtimerebel.com/blog/android-and-linux-kernel-exploitation-cve-2024-36971-and-cve-2024-21626https://runtimerebel.com/blog/android-and-linux-kernel-exploitation-cve-2024-36971-and-cve-2024-21626CISA adds Android CVE-2024-36971 and Linux CVE-2024-21626 to its KEV catalog following reports of active exploitation by sophisticated threat actors.Wed, 03 Jun 2026 17:46:16 GMTCVE-2024-36971CVE-2024-21626CISA KEVAndroid SecurityLinux KernelContainer Breakouthttps://runtimerebel.com/blog/cisa-kev-update-active-exploitation-of-cve-2022-0492-and-cve-2025-48595https://runtimerebel.com/blog/cisa-kev-update-active-exploitation-of-cve-2022-0492-and-cve-2025-48595CISA adds Linux Kernel and Android Framework vulnerabilities to its Known Exploited Vulnerabilities catalog. Prioritize patching CVE-2022-0492 and CVE-2025-48595.Tue, 02 Jun 2026 21:13:18 GMTCVE-2022-0492CVE-2025-48595CISA KEVLinux KernelAndroid Securityhttps://runtimerebel.com/blog/cve-2022-21371-cisa-warns-of-oracle-weblogic-exploitationhttps://runtimerebel.com/blog/cve-2022-21371-cisa-warns-of-oracle-weblogic-exploitationCISA adds CVE-2022-21371 to its KEV catalog, warning of active exploitation of an information disclosure flaw in Oracle WebLogic Server. Patch immediately.Tue, 02 Jun 2026 13:27:03 GMTCVE-2022-21371Oracle WebLogicCISA KEVInformation Disclosurehttps://runtimerebel.com/blog/cve-2024-21182-oracle-weblogic-server-under-active-exploitationhttps://runtimerebel.com/blog/cve-2024-21182-oracle-weblogic-server-under-active-exploitationCISA added CVE-2024-21182, an unspecified vulnerability in Oracle WebLogic Server, to its KEV Catalog due to active exploitation. Immediate patching required.Mon, 01 Jun 2026 18:11:46 GMTCVE-2024-21182Oracle WebLogic ServerCISA KEVActive ExploitationUnspecified Vulnerabilityhttps://runtimerebel.com/blog/cve-2026-0257-palo-alto-pan-os-auth-bypass-under-active-attackhttps://runtimerebel.com/blog/cve-2026-0257-palo-alto-pan-os-auth-bypass-under-active-attackCISA adds CVE-2026-0257, an actively exploited authentication bypass in Palo Alto Networks PAN-OS, to its KEV catalog.Fri, 29 May 2026 20:55:29 GMTCVE-2026-0257Palo Alto NetworksPAN OSAuthentication BypassCISA KEVActive Exploitationhttps://runtimerebel.com/blog/actively-exploited-cves-daemon-tools-lite-tanstack-nx-consolehttps://runtimerebel.com/blog/actively-exploited-cves-daemon-tools-lite-tanstack-nx-consoleCISA added three vulnerabilities—CVE-2026-8398, CVE-2026-45321, CVE-2026-48027—to its KEV Catalog due to active exploitation. Prioritize patching.Wed, 27 May 2026 20:48:50 GMTCVE-2026-8398CVE-2026-45321CVE-2026-48027CISA KEVDaemon Tools LiteTanStackNx ConsoleEmbedded Malicious Codehttps://runtimerebel.com/blog/cve-2024-50498-cisa-orders-patch-for-exploited-cpanel-plugin-flawhttps://runtimerebel.com/blog/cve-2024-50498-cisa-orders-patch-for-exploited-cpanel-plugin-flawCISA mandates federal agencies patch CVE-2024-50498, an actively exploited LiteSpeed cPanel plugin vulnerability, to prevent unauthorized account access.Wed, 27 May 2026 13:21:58 GMTCVE-2024-50498cPanelLiteSpeedCISA KEVXSShttps://runtimerebel.com/blog/cve-2024-50498-patch-exploited-litespeed-cpanel-plugin-zero-dayhttps://runtimerebel.com/blog/cve-2024-50498-patch-exploited-litespeed-cpanel-plugin-zero-dayCISA warns of active exploitation of CVE-2024-50498 in LiteSpeed cPanel plugins, allowing attackers to execute scripts with root privileges. Patch now.Wed, 27 May 2026 09:17:56 GMTCVE-2024-50498LiteSpeedcPanelCISA KEVRCEPrivilege Escalation