CVE-2026-22720 2

Vulnerability (CVE)

⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More

A maximum-severity authentication bypass in Cisco Catalyst SD-WAN Controller and Manager, tracked as CVE-2026-20127 with a CVSS score of 10.0, has been exploited in the wild in activity dating back to 2023, letting an unauthenticated remote attacker gain...

Zero-Days & Exploits

CISA Adds Actively Exploited VMware Aria Operations Flaw CVE-2026-22719 to KEV Catalog

Cyber Risks The Hacker News

CISA added CVE-2026-22719, a high-severity command injection flaw (CVSS 8.1) in Broadcom VMware Aria Operations, to its KEV catalog on Tuesday, citing active exploitation in the wild. Broadcom said an unauthenticated actor could execute arbitrary commands...

Zero-Days & Exploits