network-security

6 articles · newest first

Rows of network server racks in a data center

your Citrix login page can be hacked without anyone entering a password — patch it today

CVE-2026-8452 lets an attacker with zero credentials overflow a buffer inside NetScaler and run their own code — and Citrix's advisory was so thin that even the researchers had to guess the CVE number.

Ravi Malhotra · 5d ago · 6 min

Hardware

cisco just patched three near-perfect 9.9 bugs in the box that runs your whole network

Three flaws in Catalyst SD-WAN and IOS XE score 9.9 out of 10 — and one of them lets an attacker reach files no matter how the device is configured.

Ravi Malhotra · Aug 8 · 6 min

A rack-mounted network security appliance similar to SonicWall's SMA 1000 series sitting at the edge of a company network

Hardware

a ransomware crew had root on SonicWall's boxes for weeks before anyone noticed

CVE-2026-15409 and CVE-2026-15410 let INC ransomware walk into SMA 1000 appliances as root — SonicWall didn't even know the holes existed until the attacks were already underway.

Ravi Malhotra · Aug 6 · 6 min

Networking and firewall equipment mounted in a server rack

Software

Cisco's firewall management tool shipped with a hidden login — and attackers found it first

CVE-2026-20316 is a static-credential bug in Secure FMC that's already on CISA's Known Exploited Vulnerabilities list, with a federal patch deadline of August 1.

Priya Nair · Aug 5 · 6 min

Rows of networking server racks with status lights in a data center

Hardware

Arista's SD-WAN box has a bug so bad hackers don't even need a password

CVE-2026-16812 scores a perfect 10, needs zero credentials, and CISA is already watching it get used against real networks.

Ravi Malhotra · Aug 3 · 7 min

Networking equipment and cables in a server rack, representing the Cisco Secure Firewall Management Center affected by CVE-2026-20316

Software

Cisco's firewall management tool had a hardcoded password. attackers found it before Cisco did

CVE-2026-20316 gives anyone the login to a low-privilege account baked into Cisco Secure FMC — and Cisco's own team says it was already being used in the wild before a patch existed.

Priya Nair · Jul 31 · 7 min