CISA KEV – Security Blog https://blog.siteguarding.com Wed, 28 Oct 2026 00:01:16 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg CISA KEV – Security Blog https://blog.siteguarding.com 32 32 PHP2Shell Vulnerabilities Exploited: Patch PHP Before Oct 29 https://www.siteguarding.com/security-blog/php2shell-cisa-kev-patch-now/ Wed, 28 Oct 2026 00:01:16 +0000 https://www.siteguarding.com/security-blog/php2shell-cisa-kev-patch-now/ CISA added the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities catalog on October 26, after honeypots caught attackers running code on an unpatched PHP server. The flaws are in the PHP runtime itself, so updating WordPress or Joomla does not close them. Key takeaways PHP2Shell covers CVE-2026-109618 and CVE-2026-109619, two critical flaws in...

Source

]]> On-Prem VeloCloud Exploit: Read-Only Login Becomes Superuser https://www.siteguarding.com/security-blog/on-prem-velocloud-readonly-exploit/ Mon, 26 Oct 2026 15:32:16 +0000 https://www.siteguarding.com/security-blog/on-prem-velocloud-readonly-exploit/ Attackers are using an on-prem VeloCloud exploit, CVE-2026-114625 (CVSS 9.9), to turn the lowest-privilege Enterprise Read Only portal account into local superuser on the Arista VeloCloud Orchestrator host. That host runs the SD-WAN management plane for every branch and site it controls. A forgotten login is now the shortest path to the management plane. Key takeaways On 26 October 2026...

Source

]]>