Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
3 / 3 results
highbug_reportVulnerabilitybug_reportVulnerability
SolarWinds ARM hard-coded key flaw enables unauthenticated RCE
SolarWinds Access Rights Manager (ARM) versions 2026.2 and prior. The vulnerability stems from a hard-coded static key that allows unauthenticated remote code execution.
CVE-2026-2832619 Sep · 07:31 UTC
criticalbug_reportVulnerabilitybug_reportVulnerability
N-able N-central pre-auth RCE (CVE-2026-86218) requires immediate patch
N-able N-central remote monitoring and management (RMM) platform. Specific affected versions not disclosed in available information. Pre-authentication attack surface suggests all internet-facing instances are at risk.
CVE-2026-862189 Sep · 11:51 UTC
highbug_reportVulnerabilitybug_reportVulnerability
N-able N-central auth bypass exploited; CISA orders patch by Aug 6
N-able N-central versions prior to 2026.3 HF1. CVE-2026-18577 (CVSS 8.2) is an incomplete patch for CVE-2026-18556. Affects on-premises N-central servers with remote management capabilities.
CVE-2026-185564 Aug · 05:00 UTC