September 2026
CVE-2026-45659: SharePoint authenticated remote code executionNew!!
CISA lists CVE-2026-45659 as exploited. TechGeeks action notice for SharePoint authenticated remote code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2008-4128: Cisco IOS Cross-Site Request Forgery VulnerabilityNew!!
CISA lists CVE-2008-4128 as exploited. TechGeeks action notice for Cisco IOS Cross-Site Request Forgery Vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2026-15409: SonicWall SMA1000 unauthenticated WorkPlace SSRFNew!!
CISA lists CVE-2026-15409 as exploited. TechGeeks action notice for SonicWall SMA1000 unauthenticated WorkPlace SSRF, with scope, remediation, investigation guidance, and official sources.
CVE-2026-15410: SonicWall SMA1000 administrator code injectionNew!!
CISA lists CVE-2026-15410 as exploited. TechGeeks action notice for SonicWall SMA1000 administrator code injection, with scope, remediation, investigation guidance, and official sources.
CVE-2026-56155: AD FS local privilege escalationNew!!
CISA lists CVE-2026-56155 as exploited. TechGeeks action notice for AD FS local privilege escalation, with scope, remediation, investigation guidance, and official sources.
CVE-2026-56164: SharePoint missing-authentication privilege escalationNew!!
CISA lists CVE-2026-56164 as exploited. TechGeeks action notice for SharePoint missing-authentication privilege escalation, with scope, remediation, investigation guidance, and official sources.
CVE-2026-25089: FortiSandbox second-order command injectionNew!!
CISA lists CVE-2026-25089 as exploited. TechGeeks action notice for FortiSandbox second-order command injection, with scope, remediation, investigation guidance, and official sources.
CVE-2026-39808: FortiSandbox unauthenticated command injectionNew!!
CISA lists CVE-2026-39808 as exploited. TechGeeks action notice for FortiSandbox unauthenticated command injection, with scope, remediation, investigation guidance, and official sources.
CVE-2026-58644: SharePoint unauthenticated deserialization RCENew!!
CISA lists CVE-2026-58644 as exploited. TechGeeks action notice for SharePoint unauthenticated deserialization RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2021-27137: DD-WRT Stack-Based Buffer Overflow VulnerabilityNew!!
CISA lists CVE-2021-27137 as exploited. TechGeeks action notice for DD-WRT Stack-Based Buffer Overflow Vulnerability, with scope, remediation, investigation guidance, and official sources.