Tag
Remote Code Execution Vulnerability in Kaspersky Secure Mail Gateway
2 TTPs 1 CVEA critical remote code execution vulnerability, CVE-2023-41056, in Kaspersky Secure Mail Gateway allows unauthenticated attackers to execute arbitrary code on affected appliances.
Remote Command Injection Vulnerability in Tenda CP3
2 TTPs 1 CVEAn unauthenticated remote command injection vulnerability in Tenda CP3 firmware version 27.5.57.101 allows attackers to execute arbitrary system commands via the AlarmVoiceURL argument.
Critical SSRF Vulnerability in SonicWall SMA1000 Appliances
1 TTP 2 CVEsSonicWall SMA1000 appliances are vulnerable to an unauthenticated server-side request forgery (SSRF) flaw, enabling remote attackers to access sensitive internal functionality and perform unauthorized operations.
Remote Out-of-Bounds Write Vulnerability in D-Link DSM-G600
1 TTP 1 CVEA critical out-of-bounds write vulnerability in the D-Link DSM-G600 multipart handler allows remote attackers to compromise the device via the /load_file.cgi endpoint, with public exploit code currently available.
Authenticated Remote Code Execution in TP-Link Archer BE800
1 TTP 1 CVEAn authenticated remote code execution vulnerability (CVE-2026-16348) in the TP-Link Archer BE800 management interface allows attackers with administrator privileges to execute arbitrary commands via shell injection in the VPN key field.
Critical Buffer Overflow in Wavlink Router Export Pingortrace CGI
1 rule 1 TTP 1 CVEA critical stack-based buffer overflow in Wavlink WN531P3 and WN535M1 devices allows remote code execution via crafted HTTP cookie data.
SonicWall SMA: Multiple Vulnerabilities
3 TTPsMultiple vulnerabilities in SonicWall SMA allow an unauthenticated, remote attacker to bypass security mechanisms and execute arbitrary operating system commands on the affected system, leading to full compromise of the appliance.
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CVE-2026-15409)
2 TTPs 2 CVEs 6 IOCsA critical server-side request forgery (SSRF) vulnerability, identified as CVE-2026-15409, exists in SonicWall SMA1000 Appliances, allowing a remote, unauthenticated attacker to force the appliance to make requests to arbitrary internal or external locations, potentially leading to information disclosure or access to restricted network services.
Critical OS Command Injection in 9Router (CVE-2026-59800)
1 rule 2 TTPs 1 CVEA critical OS command injection vulnerability (CVE-2026-59800) affects 9Router versions prior to 0.4.44, allowing unauthenticated remote attackers to execute arbitrary OS commands as root via a crafted POST request to the /api/tunnel/tailscale-install endpoint, leading to full system compromise with active exploitation observed.
Multiple Critical Vulnerabilities in Fortinet Products Lead to RCE and Data Exposure
2 rules 4 TTPs 3 CVEs 6 IOCsMultiple critical vulnerabilities (CVE-2025-67862, CVE-2026-25089, CVE-2026-49938) have been discovered across Fortinet products including FortiOS, FortiPortal, FortiProxy, and FortiSandbox, enabling unauthenticated attackers to achieve remote arbitrary code execution and compromise data confidentiality.
Fortinet Appliance Authentication Bypass Vulnerability (CVE-2022-40684) Exploitation
2 rules 2 TTPsExploitation of CVE-2022-40684, a Fortinet appliance authentication bypass vulnerability, allows unauthorized REST API access to modify system configurations, potentially leading to complete system compromise.