Cisco patches exploited Secure Email Gateway root RCE
CVE-2026-76519 (CVSS 9.8) lets an unauthenticated sender write files and run commands as root on Cisco Secure Email Gateway via a crafted attachment. Exploited in the wild.
Stories tagged: #exploitation
Nextcloud Collabora CODE RCE CVE-2026-110447 exploited
CVE-2026-110447 lets unauthenticated attackers run commands via the Collabora Built-in CODE app's proxy.php and plant web shells. Exploited since September; fix is in 26.4.303.
Cisco Unified CM CVE-2026-20230 now drops webshells via Tor
Three weeks after the June 3 patch, Defused honeypots see automated Tor-routed sweeps deploying multi-stage JSP shells via the WebDialer SSRF. Patch alone won't evict them.