Cisco ASA and FTD CISA KEV: Patch CVE-2026-20349
CISA added Cisco ASA and FTD CVE-2026-20349 to KEV after Cisco confirmed active attacks. Patch affected Remote Access SSL VPN software and validate firewall availability.
Learn MoreColumn 1
Tag: Network Security
DD-WRT CVE-2021-27137: Patch the New CISA KEV Router Risk
CISA added DD-WRT CVE-2021-27137 to KEV. Update builds before 45724, keep router administration private, and disable unnecessary UPnP.
Learn More
Comfast CVE-2026-15511 Router Security Checklist for CF-WR631AX V3
Check Comfast CF-WR631AX V3 router exposure, firmware, backups, admin access, DNS, forwarding rules, and replacement options for CVE-2026-15511.
Learn More
Ubiquiti UniFi Bulletin 066: Patch Critical Connect, Talk, Access, Protect, and OS Flaws
Ubiquiti Security Advisory Bulletin 066 fixes critical UniFi Connect, Talk, Access, Protect, and OS flaws. Back up, patch, and verify versions.
Learn More
Tenda CVE-2026-11405: Check Routers for Hidden Admin Backdoor
CERT/CC warns that CVE-2026-11405 affects multiple Tenda firmware builds. Admins should disable remote management, isolate, review, and replace if needed.
Learn More
Cisco Unified CM CVE-2026-20230: Patch WebDialer SSRF Exposure
Cisco Unified CM CVE-2026-20230 is in CISA KEV with active exploitation. Check WebDialer, patch 14SU6 or the approved 15 COP path, and verify voice services.
Learn More
CISA KEV: Patch Lantronix EDS5000 CVE-2025-67038
CISA added Lantronix EDS5000 CVE-2025-67038 to KEV. Patch affected serial device servers, restrict management access, and verify industrial network exposure.
Learn More
CISA KEV: Patch Critical Ubiquiti UniFi OS CVEs Before June 26
Patch Ubiquiti UniFi OS CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910, then verify model-specific fixed versions and exposure.
Learn More
Cisco SD-WAN Manager CVE-2026-20262: Patch the KEV File Write Bug
CISA added Cisco Catalyst SD-WAN Manager CVE-2026-20262 to KEV on June 15, 2026. Patch fixed software, restrict management access, and review admin activity.
Learn More
Arista EOS CVE-2026-7473: Patch the KEV Tunnel Decapsulation Bug
CISA added Arista EOS CVE-2026-7473 to KEV on June 9, 2026. Patch affected EOS switches, review VXLAN/GRE decapsulation exposure, and verify fabric behavior.
Learn More