cisa kev

4 articles · newest first

Rows of server racks in a data center, representative of the self-hosted infrastructure Gitea instances typically run on

a Gitea admin's hosting bill flagged 70% CPU usage. that's how he found the hackers

A bug that lets anyone with a free account plant a git hook is now CISA's problem — and it started with a cryptominer, not a headline.

Priya Nair · Aug 26 · 6 min

Rows of rack-mounted network appliances in a data center, similar to load balancer hardware

Software

This load balancer bug got patched in June. Hackers had a five-week head start before CISA said a word

CVE-2026-8037 lets anyone run root commands on Kemp LoadMaster appliances with zero credentials — and 792 attack attempts from 65 IP addresses landed before it made the federal watch list.

Priya Nair · Aug 23 · 6 min

Cisco networking and firewall hardware mounted in a server rack

Software

Cisco's firewall has a bug that lets anyone crash it — no password, no login, just one request

CVE-2026-20349 doesn't steal your data. It just reboots your VPN gateway on command, and Cisco's already watching it happen in the wild.

Priya Nair · Aug 23 · 6 min

Rows of server racks in a data center representing an email server infrastructure

Software

zimbra patched this bug in july. hackers are breaking into inboxes with it right now

CERT Polska is warning that attackers are actively exploiting an unauthenticated command-injection bug in Zimbra's SNMP monitoring component — one Zimbra quietly fixed five weeks ago, in version 10.1.20.

Priya Nair · Aug 22 · 6 min