CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
2 advisories matched
CVE-2026-1027649.8/CRITICALEPSS 94.0%CISA KEV
2026-10-15

BeyondTrust Remote Support Authentication Bypass and Arbitrary File Operation Advisory (CVE-2026-102764)

[Affected Scope] Internal messaging components of BeyondTrust Remote Support appliances.

[Impact] Unauthenticated remote attackers can bypass authentication via origin spoofing to perform arbitrary file operations, leading to full system compromise.

[Mitigation] Immediately apply the vendor-provided security patch (KB0024066) and restrict access to the management interface.

CVE-2026-672796.5/MEDIUMEPSS 94.0%CISA KEV
2026-09-05

MikroTik RouterOS SSH Authentication Bypass and File Manipulation (CVE-2026-67279)

[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific security releases.

[Impact] Unauthenticated attackers can create, overwrite, or reconstruct files within the RouterOS namespace via SSH, leading to configuration theft or system compromise.

[Mitigation] Upgrade to versions 6.49.21, 7.23.4, 7.24.2 or later, and restrict SSH access.