TODAY

THE THREE

1. #1 · CVE-2026-20079

   Cisco

   KEV

   What: If your organization uses Cisco Secure Firewall Management Center, an attacker anywhere on the internet can bypass the login screen entirely and get root-level control of your firewall — no username, no password required. This is as bad as it gets: CVSS 10.0, actively exploited, 76% exploit odds.

   Why it moved: Actively exploited · Widely deployed · Critical severity · 76% exploit odds

   Who is exploiting: Actively-exploited (CISA KEV)

   Action · Apply Cisco's patch for FMC Software right now — no exceptions.

2. #2 · CVE-2026-33824

   Microsoft

   KEV

   What: A memory-corruption flaw in Microsoft's IKE Service (used in Windows VPN and IPsec connections) can let a remote attacker run code on your systems with no user interaction needed. This affects nearly every Windows environment and is actively being exploited.

   Why it moved: Actively exploited · Everyone runs this · Critical severity · 73% exploit odds

   Who is exploiting: Actively-exploited (CISA KEV)

   Action · Apply the Microsoft patch for CVE-2026-33824 via Windows Update today.

3. #3 · CVE-2026-8037

   Progress

   KEV

   What: Progress LoadMaster (a popular load-balancer appliance) has a command-injection flaw with essentially 100% exploit probability — automated attack tools are almost certainly scanning for it right now. A successful hit gives attackers arbitrary command execution on your network appliance, a prime pivot point.

   Why it moved: Actively exploited · Widely deployed · Critical severity · 100% exploit odds

   Who is exploiting: Actively-exploited (CISA KEV)

   Action · Update Progress LoadMaster to the patched version immediately and check for indicators of compromise.

TRAVERSAL

NUMBERS

Entities

11M

Relationships

67M

Threat actors

281

Indicators

643k

Feeds live

19

Sources total

21