Threat Source newsletter (Sept. 9, 2021)

Summary: Cisco Talos reported a code execution vulnerability in MSHTML, the Internet Explorer rendering engine, following PrintNightmare and multiple Exchange Server flaws, and released new Snort rules to protect against its exploitation. The newsletter also covered active exploitation of Atlassian Confluence CVE-2021-26084, rated 9.8 out of 10, which U.S. Cyber Command warned about before Labor Day weekend, and a critical Cisco NFVIS authentication bypass that CISA urged users to patch immediately.
Bottom line: CVE-2021-26084 carries a 9.8 severity rating and was under active exploitation before a holiday weekend, with U.S. Cyber Command telling organizations not to wait to patch - a reminder that a week-old patch is not the same as a patched system.

Read the original at Cisco Talos ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2021-26084
Related: 2022 0-day In-the-Wild Exploitation…so far Cyber Risks ·
CVE-2021-26084: Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
Threat Brief: CVE-2021-26084 Cyber Risks ·