Tag: improper input validation
6 articles
Citrix NetScaler Exploits Create Superuser, Deploy Web Shells
A critical vulnerability in Citrix NetScaler ADC and Gateway appliances, rated 9.5 in severity, is being actively exploited by attackers, who can use it to run malicious commands and gain superuser access. This urgent threat prompted the Dutch National Cyber Security Centre to advise organizations to shut down their appliances until they're patched.
Arista Disrupts Actively Exploited Zero-Day in VeloCloud Orchestrator
Arista Networks has sounded the alarm on a critical zero-day vulnerability, CVE-2026-93952, that's being actively exploited in the wild, allowing attackers to access sensitive internal functionality in VeloCloud Orchestrator. This severe flaw can be easily exploited with low complexity, making it a high-risk threat.
CISA Warns of Persisting Vulnerabilities
Threat actors are still finding success by exploiting simple, preventable software weaknesses that have been known for years - and it's a problem that CISA says could have been designed out of products from the start. The agency's review reveals that decades-old bugs, like improper input validation, continue to plague the industry.
Zoom Patches Flaw That Could Enable Account Takeover
Zoom just patched a critical security flaw that could let hackers hijack your account - and you need to update your software ASAP to stay safe! This vulnerability, tracked as CVE-2026-53412, could allow anyone on your network to take over your Zoom account.
Zoom Discloses High-Severity Account Takeover Vulnerability
Zoom has warned users of a high-severity vulnerability in its Windows desktop client and software development kit that could let hackers hijack accounts without authentication. This critical flaw, tracked as CVE-2026-53412, has a severity score of 9.8 out of 10.
Ivanti Discloses Actively Exploited Zero-Day in Endpoint Manager
Ivanti has confirmed that hackers are actively exploiting a zero-day vulnerability, CVE-2026-6973, in its Endpoint Manager Mobile (EPMM) software, allowing them to run code remotely with administrative privileges. The company has issued patches for this and four other EPMM flaws to protect its customers.