VulnerabilitiesCVE-2026-125881CVSS 9.34 min read
N-able says every unauthenticated flaw in the Able2Shell dump is fixed in N-central 2026.4 HF2, and that it has seen scanning but no compromise of hosted servers. The authenticated bugs are still open.
VulnerabilitiesCVE-2026-125883CVSS 9.34 min read
N-able released N-central 2026.4 HF2 for seven flaws disclosed publicly on November 8, after taking hosted environments offline and telling on-premises customers to do the same.
VulnerabilitiesCVE-2026-106173CVSS 9.41 min read
Researchers published exploit code for a critical FortiSIEM path traversal bug that could let unauthenticated attackers run code. The flaw is described as recently patched.
Threat intelExploitedCVE-2024-47575CVSS 9.82 min read
A suspected state-sponsored group used a FortiManager flaw for initial access, then a path traversal bug to gain root and deploy the PeerStitch implant, researchers say.
VulnerabilitiesCVE-2026-106173CVSS 9.42 min read
Horizon3.ai published exploit code for an unauthenticated gRPC path traversal in FortiSIEM 7.5.0 that Fortinet rated critical and fixed in 7.5.1.
