tag
Actively-Exploited
Critical
SimpleHelp OIDC Authentication Bypass via Unverified JWT Signature (CVE-2026-48558)
CVE-2026-48558·
SimpleHelp — remote support / RMM (remote monitoring and management) platform, OIDC authentication flow
patched
Critical (per Ciscos own Security Impact Rating, despite a High numeric CVSS)
Cisco Unified Communications Manager WebDialer SSRF → Arbitrary File Write → Root (CVE-2026-20230)
CVE-2026-20230 (cisco-sa-cucm-ssrf-cXPnHcW)·
Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (SME) — WebDialer service
patched
Critical
Adobe ColdFusion RDS Path Traversal → Arbitrary File Read/Write → RCE (CVE-2026-48282)
CVE-2026-48282 (Adobe APSB26-68)·
Adobe ColdFusion — Remote Development Service (RDS), /CFIDE/main/ide.cfm
patched
Critical
SonicWall SMA1000 WorkPlace SSRF → Internal Erlang RPC Remote Code Execution (CVE-2026-15409)
CVE-2026-15409 (SNWLID-2026-0008)·
SonicWall SMA1000 Appliance — WorkPlace interface (websocket proxy service)
unpatched
Critical
Gitea Docker Image Reverse-Proxy Authentication Bypass — "One Header, Any User" (CVE-2026-20896)
CVE-2026-20896 (GHSA-f75j-4cw6-rmx4)·
Gitea — official Docker images (gitea/gitea), both root and rootless variants
patched
Critical
FortiSandbox 4.4.0-4.4.8 — OS Command Injection via tracer-behavior Endpoint (CVE-2026-39808)
CVE-2026-39808·
Fortinet FortiSandbox
unpatched