Patchfirst
Patchfirst

Blog | Arctic Wolf

arcticwolf.com · Undated · Licence: not cleared; local research copy only

Read the original ↗

CVEs this report names

12 CVEs
  1. CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1133External Remote Services4 reports
    95.0%Top 0.14%
    93.3priority
  2. CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
    N-able · N-centralKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts7 reports
    14.6%Top 3.3%
    88.0priority
  3. CVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
    SonicWall · SMA1000 AppliancesKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1090Proxy1 report
    6.8%Top 6%
    87.7priority
  4. CVE-2026-15410SonicWall SMA1000 Appliances Code Injection Vulnerability
    SonicWall · SMA1000 AppliancesKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    11.8%Top 3.9%
    86.1priority
  5. CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
    Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing Application1 report
    88.7%Top 0.23%
    83.8priority
  6. CVE-2026-18556N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
    N-able · N-centralKEVPublic exploitHigh · 7.4T1190Exploit Public-Facing ApplicationT1078Valid Accounts5 reports
    7.9%Top 5.3%
    82.1priority
  7. CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
    Cisco · Secure Firewall Management Center (FMC)KEVRansomwareMedium · 5.3T1078Valid AccountsT1005Data from Local System1 report
    35.1%Top 1.6%
    80.3priority
  8. CVE-2026-39808Fortinet FortiSandbox OS Command Injection Vulnerability
    Fortinet · FortiSandboxKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    93.2%Top 0.17%
    78.7priority
  9. CVE-2026-6875Sandbox Escape in ServiceNow AI Platform
    ServiceNow · ServiceNow AI PlatformPublic exploitCritical · 9.51 report
    1.4%Top 27%
    71.7priority
  10. CVE-2026-50656Microsoft Defender Elevation of Privilege Vulnerability
    Microsoft · Microsoft Malware Protection EnginePublic exploitHigh · 7.87 reports
    11.2%Top 4.1%
    42.4priority
  11. CVE-2026-28323SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability
    SolarWinds · Web Help DeskCritical · 9.85 reports
    1.0%Top 36%
    31.2priority
  12. CVE-2026-28299SolarWinds Web Help Desk Denial-of-Service Vulnerability
    SolarWinds · Web Help DeskHigh · 8.25 reports
    0.7%Top 46%
    29.0priority

Where it names them

CVE-2026-0257
Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware
Original (opens in a new tab) ↗
CVE-2026-18577
Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All
Original (opens in a new tab) ↗
CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate Patching
Original (opens in a new tab) ↗
CVE-2026-15409
CVE-2026-15409, CVE-2026-15410: Security Bulletin: SonicWall SMA 1000 Series Zero-Day Vulnerabilities
Original (opens in a new tab) ↗
CVE-2026-15410
CVE-2026-15409, CVE-2026-15410: Security Bulletin: SonicWall SMA 1000 Series Zero-Day Vulnerabilities
Original (opens in a new tab) ↗
CVE-2026-20079
CVE-2026-20316, CVE-2026-20079: Active Exploitation of Cisco Secure Firewall Management Center Zero-Day
Original (opens in a new tab) ↗
CVE-2026-18556
Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All
Original (opens in a new tab) ↗
CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate Patching
Original (opens in a new tab) ↗
CVE-2026-20316
CVE-2026-20316, CVE-2026-20079: Active Exploitation of Cisco Secure Firewall Management Center Zero-Day
Original (opens in a new tab) ↗
CVE-2026-39808
CVE-2026-39808: Critical Fortinet FortiSandbox OS Command Injection Vulnerability
Original (opens in a new tab) ↗
CVE-2026-6875
CVE-2026-6875: Critical Remote Code Execution Vulnerability in ServiceNow AI Platform Urgent Mitigation Required
Original (opens in a new tab) ↗
CVE-2026-50656
12, 2026Microsoft Defender Patch Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass
Original (opens in a new tab) ↗
Microsoft Defender Patch Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)
Original (opens in a new tab) ↗
CVE-2026-28323
Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW
Original (opens in a new tab) ↗
SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299
Original (opens in a new tab) ↗
CVE-2026-28299
Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All
Original (opens in a new tab) ↗
SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299
Original (opens in a new tab) ↗

Techniques drawn from this report

None

No passage in this report has been tied to an ATT&CK technique.

↑ ↓ chooseEnter openEsc close