#network-security

3 articles

A load balancer's input-sanitising function is the reason it can be owned without a password

2026-08-10Security

CVE-2026-8037 is a CVSS 9.6 command injection in Progress Kemp LoadMaster, traced to its escape_quotes() routine. 792 exploitation attempts over 41 days from 65 IPs across 18 countries — and the federal remediation deadline is today.

SonicWall Appliance Attacks Tied to Threat Actor Now Feeding INC Ransomware Surge

2026-08-08Security

Volexity says a threat actor it tracks as UTA0533 is harvesting credentials from compromised SonicWall appliances, and researchers note INC Ransomware has picked up its pace since the start of August.

A Cisco firewall manager zero-day is being exploited — and it chains with a CVSS 10.0 bug

2026-08-08Security

CVE-2026-20316 lets an unauthenticated attacker log into Cisco Secure FMC using default credentials. Chained with CVE-2026-20079, that becomes root.