September 2026
CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityNew!!
CISA lists CVE-2026-20182 as exploited. TechGeeks action notice for Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2026-42897: Exchange Outlook Web Access cross-site scriptingNew!!
CISA lists CVE-2026-42897 as exploited. TechGeeks action notice for Exchange Outlook Web Access cross-site scripting, with scope, remediation, investigation guidance, and official sources.
CVE-2008-4250: Legacy Windows Server Service RPC remote code executionNew!!
CISA lists CVE-2008-4250 as exploited. TechGeeks action notice for Legacy Windows Server Service RPC remote code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2009-1537: Legacy DirectShow QuickTime parsing RCENew!!
CISA lists CVE-2009-1537 as exploited. TechGeeks action notice for Legacy DirectShow QuickTime parsing RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2010-0249: Legacy Internet Explorer use-after-free RCENew!!
CISA lists CVE-2010-0249 as exploited. TechGeeks action notice for Legacy Internet Explorer use-after-free RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2010-0806: Legacy Internet Explorer use-after-free RCENew!!
CISA lists CVE-2010-0806 as exploited. TechGeeks action notice for Legacy Internet Explorer use-after-free RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2026-41091: Microsoft Malware Protection Engine privilege escalationNew!!
CISA lists CVE-2026-41091 as exploited. TechGeeks action notice for Microsoft Malware Protection Engine privilege escalation, with scope, remediation, investigation guidance, and official sources.
CVE-2026-45498: Microsoft Defender local denial of serviceNew!!
CISA lists CVE-2026-45498 as exploited. TechGeeks action notice for Microsoft Defender local denial of service, with scope, remediation, investigation guidance, and official sources.
CVE-2026-0257: PAN-OS GlobalProtect authentication bypassNew!!
CISA lists CVE-2026-0257 as exploited. TechGeeks action notice for PAN-OS GlobalProtect authentication bypass, with scope, remediation, investigation guidance, and official sources.
CVE-2025-48595: Android Framework privilege escalationNew!!
CISA lists CVE-2025-48595 as exploited. TechGeeks action notice for Android Framework privilege escalation, with scope, remediation, investigation guidance, and official sources.