Security Notices
CVE-2026-34910: UniFi OS input-validation flaw
UniFi OS input-validation failures can permit command injection from an attacker with network access. Match the exact console or server product to its fixed release, then review system and access logs for unexplained activity.
CVE-2026-34909: UniFi OS path traversal
UniFi OS path traversal can expose underlying files to an attacker with network access. Apply the product-specific update and preserve access logs; the reviewed scope does not establish arbitrary file upload or placement.
CVE-2026-34908: UniFi OS improper access control allows unauthorized system changes
UniFi OS access-control failures can allow unauthorized system changes from the network. Update the affected console or server and review its state and access logs; installing the fix does not reverse earlier changes.
CVE-2025-67038: Lantronix EDS5000 Code Injection Vulnerability
Lantronix EDS5000 username-parameter injection can run commands as root. Record the model, hardware revision and firmware; available release notes describe upgrade constraints but do not establish a CVE-specific fixed build.
CVE-2026-20262: Cisco Catalyst SD-WAN Manager arbitrary file write
Authenticated attackers can create or overwrite files through Catalyst SD-WAN Manager path traversal. Preserve admin-tech and upload logs, install the branch-specific fix, and involve Cisco TAC when suspicious uploads or other indicators appear.
CVE-2026-10520: Ivanti Sentry OS Command Injection Vulnerability
Ivanti Sentry command injection can permit unauthenticated root access when the appliance is unmanaged and vulnerable endpoints are externally reachable. Managed access controls limit exposure but do not establish a software fix; the fixed-build mapping remains unverified.
CVE-2026-56164: SharePoint missing-authentication privilege escalation
Missing authentication in SharePoint can let an unauthorized network attacker elevate privileges. Microsoft's Moderate severity does not negate reported exploitation; update every applicable farm server and review authentication, IIS and role-change evidence.
CVE-2026-56155: AD FS local privilege escalation
An authorized local attacker can exploit AD FS access controls to gain administrator privileges. Match each federation node to its Windows update; patch completion alone cannot establish that identity-service credentials and trusts remain safe.
CVE-2026-15410: SonicWall SMA1000 administrator code injection
This SMA1000 code-injection flaw requires administrator access to the Appliance Management Console. Apply the current supported hotfix and investigate suspected compromise; the historical minimum build does not establish protection against later vulnerabilities.
CVE-2026-15409: SonicWall SMA1000 unauthenticated WorkPlace SSRF
Unauthenticated requests can make the SMA1000 WorkPlace interface contact unintended destinations. Verify the appliance model and hotfix, update, and conduct the compromise review; SonicWall firewall SSL-VPN and SMA 100 are outside this notice's scope.