Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:*

2 briefs RSS
high threat

WordPress Exploitation and Data Exfiltration by Red Heron Affiliate

An adversary linked to the Red Heron group is exploiting multiple vulnerabilities in WordPress, Ubiquiti, and ZyXEL devices to conduct reconnaissance, gain persistence, and exfiltrate sensitive records, including over 18,000 government documents.

WordPress +2 Red Heron data-theft exfiltration vulnerability-exploitation
1r 2t 5c 3i
critical advisory

Multiple Critical Vulnerabilities in Ubiquiti UniFi OS

Ubiquiti has addressed multiple critical vulnerabilities including CVE-2026-34908, CVE-2026-34909, CVE-2026-34910, and CVE-2026-33000 in UniFi OS, which could allow remote attackers to make unauthorized system changes, access sensitive files, disclose information, or execute arbitrary commands on vulnerable systems.

PoC UniFi OS +6 vulnerability unifi command_injection path_traversal improper_access_control
2r 1t 5c 1i updated