September 2026
CVE-2024-20260: Cisco ASA and FTD SSL VPN denial-of-service scope expansionNew!!
Cisco materially revised a High-rated advisory that includes CVE-2024-20260. Cisco does not separately state a CVE-specific SIR. TechGeeks scope, action, fixed-release guidance, evidence status, and primary Cisco sources.
CVE-2009-0556: Legacy PowerPoint file code executionNew!!
CISA lists CVE-2009-0556 as exploited. TechGeeks action notice for Legacy PowerPoint file code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2025-37164: HPE OneView unauthenticated remote code executionNew!!
CISA lists CVE-2025-37164 as exploited. TechGeeks action notice for HPE OneView unauthenticated remote code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2026-20805: Desktop Window Manager local information disclosureNew!!
CISA lists CVE-2026-20805 as exploited. TechGeeks action notice for Desktop Window Manager local information disclosure, with scope, remediation, investigation guidance, and official sources.
CVE-2026-20045: Cisco Unified Communications Products Code Injection VulnerabilityNew!!
CISA lists CVE-2026-20045 as exploited. TechGeeks action notice for Cisco Unified Communications Products Code Injection Vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2025-34026: Versa Concerto Improper Authentication VulnerabilityNew!!
CISA lists CVE-2025-34026 as exploited. TechGeeks action notice for Versa Concerto Improper Authentication Vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2026-21509: Microsoft Office OLE security-feature bypassNew!!
CISA lists CVE-2026-21509 as exploited. TechGeeks action notice for Microsoft Office OLE security-feature bypass, with scope, remediation, investigation guidance, and official sources.
CVE-2026-24858: FortiCloud SSO cross-account authentication bypassNew!!
CISA lists CVE-2026-24858 as exploited. TechGeeks action notice for FortiCloud SSO cross-account authentication bypass, with scope, remediation, investigation guidance, and official sources.
CVE-2026-1281: Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityNew!!
CISA lists CVE-2026-1281 as exploited. TechGeeks action notice for Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2026-21510: Windows Shell and SmartScreen warning bypassNew!!
CISA lists CVE-2026-21510 as exploited. TechGeeks action notice for Windows Shell and SmartScreen warning bypass, with scope, remediation, investigation guidance, and official sources.