CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
BeyondTrust Remote Support Authentication Bypass and Arbitrary File Operation Advisory (CVE-2026-102764)
[Affected Scope] Internal messaging components of BeyondTrust Remote Support appliances.
[Impact] Unauthenticated remote attackers can bypass authentication via origin spoofing to perform arbitrary file operations, leading to full system compromise.
[Mitigation] Immediately apply the vendor-provided security patch (KB0024066) and restrict access to the management interface.
MikroTik RouterOS SSH Authentication Bypass and File Manipulation (CVE-2026-67279)
[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific security releases.
[Impact] Unauthenticated attackers can create, overwrite, or reconstruct files within the RouterOS namespace via SSH, leading to configuration theft or system compromise.
[Mitigation] Upgrade to versions 6.49.21, 7.23.4, 7.24.2 or later, and restrict SSH access.