LIVE · cybersecurity feed
Live wire
CVE-2026-68820 · 17th August – Threat Intelligence ReportCVE-2026-69414 · ShieldBreak bypasses Microsoft’s patch for earlier Defender flawCVE-2026-15826 · WordPress Plugin Flaw Exposes 40,000 Sites to Admin TakeoverCVE-2026-58231 · Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After DisclosureBlack Hat and DEF CON are AI conferences now, tooAkira Ransomware Uses Safe Mode to Bypass EDRCVE-2026-58231 · Crooks Buy Expired Domains for Malware Delivery, Other Threats DetailedCVE-2026-58231 · SAP Commerce Cloud CVE-2026-58231 Exploited in the WildCVE-2026-65400 · macOS Screen Sharing Flaw Exploited to Deploy Monero MinersCVE-2026-46300 · Metasploit Wrap Up: Lot of summer shells and fit http profiles

identity services engine

CVE-2026-20147high

Cisco Identity Services Engine Vulnerable to Command Injection

A critical vulnerability has been discovered in Cisco Identity Services Engine that permits remote attackers to execute arbitrary code. Exploitation requires prior authentication. The vulnerability has been assigned a CVSS score of 7.2.

CVE-2026-20190high

Cisco Identity Services Engine Leaks Information Due to Missing Authentication

A critical vulnerability has been discovered in Cisco Identity Services Engine, allowing unauthenticated remote attackers to access sensitive information. The flaw stems from a missing authentication check for a critical function within the software. This could lead to significant data exposure on affected systems.

CVE-2026-20181high

Cisco Identity Services Engine Vulnerable to RCE via Directory Traversal

A directory traversal vulnerability in Cisco Identity Services Engine could allow authenticated remote attackers to execute arbitrary code on affected systems. The vulnerability has a CVSS score of 7.2, indicating a significant security risk.

CVE-2026-20148

Cisco Identity Services Engine Vulnerability Discloses Sensitive Information

A directory traversal vulnerability in Cisco Identity Services Engine allows authenticated remote attackers to access sensitive information. The vulnerability, assigned CVE-2026-20148, has a CVSS score of 4.9, indicating a medium severity.