Security – Page 2 – TheCyberThrone

Ivanti June 2026 — Vulnerability Advisory Deep Dive

CVE-2026-10520 | Ivanti Sentry | CVSS 10.0 — OS Command Injection Vulnerability class: CWE-78 — OS Command InjectionAttack vector: Network | No authentication | No user interaction The flaw resides…

PravinKarthik June 11, 2026

CISA KEV Update — Cisco Catalyst SD-WAN, Google Chrome V8 & Arista EOS

CISA added three new vulnerabilities to its Known Exploited Vulnerabilities catalog on June 9, 2026: CVE-2026-20245 (Cisco Catalyst SD-WAN Manager), CVE-2026-11645 (Google Chromium V8), and CVE-2026-7473 (Arista Extensible Operating System).…

PravinKarthik June 10, 2026

Microsoft Patch Tuesday — June 2026

Microsoft's June 2026 Patch Tuesday is the largest release since the Patch Tuesday program began, surpassing the previous record of 167 CVEs set in October 2025. This month's release addresses…

PravinKarthik June 10, 2026

CISA adds BerriAI LiteLLM & Check Point Security Gateway to KEV

CISA added two vulnerabilities to its Known Exploited Vulnerabilities catalog on June 8, 2026, confirming active exploitation of both. The two entries are CVE-2026-42271 (BerriAI LiteLLM Command Injection) and CVE-2026-50751…

PravinKarthik June 9, 2026

CVE-2026-28318 — SolarWinds Serv-U DoS added to CISA KEV

CVE: CVE-2026-28318CVSS Score: 7.5 (High)CWE: CWE-400 — Uncontrolled Resource ConsumptionKEV Added: June 5, 2026FCEB Remediation Deadline: June 19, 2026 Vulnerability Overview The vulnerability is classified as an uncontrolled resource consumption…

PravinKarthik June 8, 2026

CVE-2026-20245 — Cisco Catalyst SD-WAN Manager Privilege Escalation

The Core Flaw CVE-2026-20245 affects the command-line interface of Cisco Catalyst SD-WAN Manager and stems from insufficient validation of user-supplied input. An authenticated local attacker can exploit it by uploading…

PravinKarthik June 6, 2026

CVE-2026-20230 — Cisco Unified CM SSRF to Potential Root Escalation

Overview CVE-2026-20230 is a critical vulnerability affecting Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (SME). The flaw is caused by improper validation of HTTP requests…

PravinKarthik June 5, 2026

CISA adds Three Vulnerabilities to KEV Catalog

Overview CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation — CVE-2022-0492, a Linux Kernel Improper Authentication vulnerability, and CVE-2025-48595,…

PravinKarthik June 4, 2026