VulnHub

Ubiquiti has announced the fixing of three severe security flaws in its UniFi line, all rated at the maximum severity score of 10.0. This is part of a broader disclosure where the company identified a total of 22 vulnerabilities, with nearly all rated critical at 9.0 or higher. The affected products include various devices within the UniFi ecosystem, which are widely used for network management and security. It’s crucial for users and administrators to apply the necessary updates to mitigate any potential risks from these vulnerabilities. Failing to do so could expose networks to significant security threats, given the high severity of these flaws.

A recent study conducted by Tenable and SentinelOne has revealed concerning trends showing that both state-sponsored actors and criminal organizations are targeting the same weak spots in edge infrastructure. This shared interest in exploiting vulnerabilities raises alarms about the security posture of systems that are often overlooked. The research indicates that attackers are increasingly using similar tactics to breach these defenses, which could lead to significant data breaches and service disruptions. Companies that rely on edge infrastructure must take immediate action to identify and patch these vulnerabilities to protect themselves from potential exploitation. This convergence of threat actors highlights the need for heightened vigilance and improved security strategies in safeguarding perimeter defenses.

The Cybersecurity and Infrastructure Security Agency (CISA) has added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating they are currently being exploited in the wild. These vulnerabilities affect a variety of systems, including Red Hat Libuser, Microsoft SQL Server, and Citrix NetScaler, among others. The identified vulnerabilities range from privilege escalation to remote code execution, posing serious risks to federal agencies and potentially impacting other organizations as well. CISA urges all entities to prioritize fixing these vulnerabilities to protect their systems, especially those that expose critical assets to attackers. The agency encourages reporting any additional exploited vulnerabilities that are not yet in the KEV Catalog for potential inclusion.

CISA has added a new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, specifically CVE-2026-60004, which is a code injection vulnerability in Gitea. This vulnerability is being actively exploited and poses significant risks, particularly to federal agencies. In response, CISA has emphasized the urgency for federal agencies to prioritize the remediation of this high-risk vulnerability, as it can grant attackers total control over affected systems. While the directive primarily targets Federal Civilian Executive Branch agencies, CISA encourages all organizations to adopt similar risk-based vulnerability management practices. The agency will continue to update the KEV Catalog with vulnerabilities that meet its criteria, and organizations are encouraged to report any known exploits not currently listed.

Ebyte's NE2-D11 firmware, version FW-9167-0-11, has multiple serious vulnerabilities that could allow attackers to gain unauthorized access and control over devices. Issues include inadequate authentication, cleartext transmission of sensitive information, and weaknesses in session management, which could lead to unauthorized configuration changes and data breaches. The vulnerabilities, which have a CVSS score as high as 9.8, affect critical sectors like manufacturing and energy, and their impact is global. Ebyte has acknowledged the problems and is working on a patch, but there has been little communication about its status. Users are advised to contact Ebyte for updates and to implement security measures in the meantime.

Rently Smart Home has a critical vulnerability affecting versions 20.1.0 and earlier, which allows attackers to access sensitive information, including Master Pins, and override user permissions. This issue arises from insufficiently protected credentials. The vulnerability is particularly concerning for users in commercial facilities and information technology sectors across the United States and India. Rently has addressed this flaw with a patch released in late June 2026, meaning users do not need to take any additional action. However, organizations are still encouraged to improve their cybersecurity measures to mitigate risks associated with such vulnerabilities.

Australian officials are warning TeamCity users to address a critical vulnerability that is currently being exploited by attackers. This alert follows a similar warning from the US government, indicating that the flaw poses a significant risk to organizations using TeamCity. The vulnerability could allow unauthorized access or control over affected systems, making it crucial for users to take immediate action. By patching their servers, companies can protect themselves from potential breaches and data loss. With active exploitation confirmed, the urgency for a fix is clear, and organizations should prioritize this update to safeguard their operations.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent three-day deadline for agencies to address a serious vulnerability in Zimbra, identified as CVE-2026-73570. This flaw enables attackers to take complete control over a user's communications, posing a significant risk to organizations using this software. The vulnerability could lead to unauthorized access to sensitive information and disrupt business operations. As Zimbra is widely used for email and collaboration, the implications of this vulnerability are considerable, affecting both public and private sector entities. Agencies are urged to act quickly to implement the necessary patches to mitigate this risk.

The Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability to its Known Exploited Vulnerabilities Catalog, specifically CVE-2026-21962, which affects Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in. This vulnerability involves improper access control and has been linked to active exploitation, making it a significant risk for federal agencies and other organizations. CISA's Binding Operational Directive (BOD) 26-04 mandates that federal agencies prioritize fixing high-risk vulnerabilities like this one, especially on publicly exposed systems. While the directive is aimed at federal agencies, CISA encourages all organizations to adopt similar risk-based approaches to vulnerability management. Companies are urged to act swiftly to mitigate this risk and report any additional vulnerabilities for consideration in the KEV Catalog.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for U.S. government agencies to patch a vulnerability in the Zimbra Collaboration Suite (ZCS) within three days. This flaw is currently being exploited by attackers, raising concerns about the potential for data breaches and unauthorized access to sensitive information. Zimbra is widely used for email and collaboration, making it critical that organizations act quickly to secure their systems. The agency's move underscores the need for immediate action to prevent exploitation and safeguard government communications. Agencies should ensure their ZCS installations are updated to mitigate this risk effectively.

A serious vulnerability has been discovered in the isolated-vm package, which is commonly used in Node.js applications. This type confusion bug allows attackers to escape the V8 sandbox, potentially leading to remote code execution (RCE) on the host machine. If exploited, the vulnerability could give attackers control over the host process, posing significant risks to any systems relying on this package. Developers using isolated-vm need to be vigilant and apply necessary updates to protect their applications. The situation underscores the importance of regular security audits and patch management in software development.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed federal agencies to prioritize fixing two vulnerabilities in the TrueConf Server, a self-hosted communications platform. These vulnerabilities are currently being actively exploited, posing a significant risk to users, particularly within government operations. The urgency of this directive underscores the potential for attackers to exploit these flaws to gain unauthorized access or disrupt communications. Agencies are advised to apply the necessary patches immediately to safeguard their systems from potential breaches. The situation emphasizes the ongoing need for vigilance in maintaining secure communication platforms, especially those used in sensitive environments.

CERT Polska has reported that a critical vulnerability in the Zimbra Collaboration Suite, known as CVE-2026-73570, is being actively exploited by attackers. This flaw allows for unauthenticated remote code execution, posing significant risks to users of the software. The vulnerability was patched on July 20, but the fact that it is now being exploited in the wild raises concerns for organizations that may not have yet applied the update. Affected users are urged to implement the patch immediately to protect their systems from potential breaches. The urgency of this situation highlights the need for timely software updates and vigilance against emerging threats.

The Cybersecurity and Infrastructure Security Agency (CISA) is warning about vulnerabilities in TrueConf, a video conferencing software, that are currently being exploited by the hacktivist group Head Mare. These vulnerabilities are enabling the deployment of a malware known as PhantomCore, which poses a significant risk to users of the software. Organizations using TrueConf are urged to patch these vulnerabilities immediately to protect their systems from potential attacks. The exploitation of these flaws could lead to unauthorized access to sensitive information and further compromise the affected systems. Timely action is crucial to prevent any disruptions or data breaches resulting from these attacks.