Vulnerabilità ed exploit

Cisco SD-WAN Flaw Joins KEV Without Vendor Confirmation

CISA’s latest KEV update says defenders cannot wait for vendor confirmation before treating a flaw as live attack surface. The unusual part is CVE-2026-20133: CISA added it to the exploited list even though Cisco has not yet flagged it, which suggests exploitation may be happening before the vendor has fully acknowledged it.

The batch covers eight flaws across Cisco Catalyst SD-WAN Manager, Kentico Xperience, Zimbra Collaboration Suite, PaperCut NG/MF, JetBrains TeamCity, and Quest KACE Systems Management Appliances. The Kentico issue, CVE-2025-2749, affects Xperience 13.0.178 and earlier and can let an attacker execute content on the server remotely; CISA also says the Zimbra, PaperCut, TeamCity, and KACE issues have been used in attacks.

For practitioners, the forward risk is not just the known exploited set. A KEV entry that arrives before the vendor’s exploitation notice is a warning that some activity may still be hidden, especially around Cisco SD-WAN where confirmed attacks already exist.

5 fonti · 21 apr

Cronologia

• 4 mag Scadenza federale CISA per CVE-2025-32975
• 23 apr Scadenza federale CISA per CVE-2026-20133
• 21 apr Segnalato da Help Net Security
• 20 apr CVE-2026-20133 aggiunto al KEV CISA
• 14 apr Segnalato da The Hacker News
• 9 apr Segnalato da Cybersecurity Dive
• 8 apr Segnalato da BleepingComputer

Fonti

• 21 apr Help Net Security

  CISA flags another Cisco Catalyst SD-WAN Manager bug as exploited (CVE-2026-20133) - Help Net Security

  CISA added Cisco Catalyst SD-WAN Manager vulnerability (CVE-2026-20133) to its KEV catalog, Cisco has yet to flag it as exploited.

  originale

• 21 apr SecurityWeek

  Organizations Warned of Exploited Cisco, Kentico, Zimbra Vulnerabilities

  CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.

  originale

• 14 apr The Hacker News

  CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software

  CISA adds six exploited vulnerabilities, including Fortinet and Exchange flaws, requiring FCEB patching by April 27, 2026.

  originale

Riepilogo fornitore: Cisco

Part of the PlainSec briefing for 2026-04-21

Every edition of this story: Cisco SD-WAN Flaw Joins KEV Without Vendor Confirmation

Altro da oggi

• ActiveMQ Brokers Exposed to Active Exploitation at Scale
• Single Verifier Let Lazarus Forge Cross-Chain Messages
• Serial-to-IP Flaws Expose Legacy OT at Scale