Spremljamo ranljivosti v izdelkih največjih proizvajalcev, kot so Microsoft, Cisco, Fortinet, Citrix in drugi. Izberite proizvajalca za seznam njegovih aktivnih ranljivosti in naših člankov.
Paloaltonetworks: ranljivosti v zadnjem letu
| CVE | CVSS | EPSS | CISA KEV | Proizvajalec | Opis (NVD, angleško) |
|---|---|---|---|---|---|
| CVE-2026-0257 | 7,8 Visoko | 96,9 % | Aktivno izkoriščana Ransomware od 29. 5. 2026 | Paloaltonetworks, Siemens | Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by |
| CVE-2026-0250 | 5,2 Srednje | 0,4 % | – | Paloaltonetworks | A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the |
Naši članki: Paloaltonetworks
Ivanti Vulnerabilities: Mitigation Strategies and Incident Response
The Centreon Centreon Web SQL Injection vulnerability, known as CVE-2024-55573, presents a significant threat to users of the Centreon application. Discovered in late December 2024, this...
Ivanti Vulnerabilities: CVE-2025-0282 and CVE-2025-0283 Summary and Protection Measures
The Centreon Web SQL Injection Vulnerability, identified as CVE-2024-53923, has posed a serious threat to its users since it was discovered in December 2024. Centreon, a...
Vulnerability Details and Protection Measures for Recent CVEs
The CVE-2025-0650 OVN DNS Record Egress ACL Bypass vulnerability surfaced in January 2025, raising serious concerns for organizations using Open vSwitch (OVN). This flaw allows attackers...
Summary of CVE-2025-23006: Critical Vulnerability in SonicWall SMA1000 Appliance Management Console
CVE-2025-23006 is a critical vulnerability found in the SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC). Discovered on January 9, 2025, and publicly...
Summary of CVE-2024-52975 Fleet Server Information Disclosure and Protection Measures
CVE-2024-52975 is a significant vulnerability recently identified in Fleet Server, which poses a serious risk by logging sensitive information at the INFO and ERROR levels. Discovered...
CVE-2024-12857 AdForest WordPress Authentication Bypass Vulnerability and Recent Manufacturer’s Vulnerabilities
A critical vulnerability known as CVE-2024-12857 has recently come to light in the AdForest WordPress theme. Affecting all versions up to 5.1.8, this security flaw has...
Vulnerability Summary: CVE-2024-11218 in Buildah and Podman
CVE-2024-11218, also known as the Podman Buildah Compose Privilege Escalation Vulnerability, was reported on January 20, 2025. This security flaw affects the Buildah package in the...
Recent Cybersecurity Threats and Vulnerabilities Overview: Ivanti CVE-2025-0282 attack and BlackBerry Global Threat Report
The CVE-2025-24024 Matrix Mjolnir Unrestricted Command Execution Vulnerability has recently come to light as a critical security issue. This vulnerability allows attackers to execute arbitrary commands...
CVE-2025-23477 Realty Workstation Missing Authorization Vulnerability: Security Advisories and Protection Measures
CVE-2025-23477 is a critical vulnerability found in the Realty Workstation plugin for WordPress. This “Missing Authorization” issue affects versions up to 1.0.45. Discovered on January 21,...