Alerts
Timely information about security issues, vulnerabilities, and exploits.
753 articles
31 July 2026
Active Exploitation of Vulnerability in Cisco Secure Firewall Management Center
Attackers are exploiting a medium-severity vulnerability in Cisco Secure Firewall Management Center to log in and access sensitive data. Patch immediately.
Alerts
29 July 2026
Koollab LMS - Multiple Vulnerabilities including Remote Code Execution, SQL Injection, and Authentication Bypass
Multiple vulnerabilities have been discovered in Koollab's Learning Management System (LMS). Three Learning, the product owner, has rolled out fixes for all reported vulnerabilities across all cloud-hosted instances of the LMS. Special thanks to the researchers from Centre for Strategic Infocomm Technologies (CSIT) and Three Learning for coordinating through CSA's Responsible Vulnerability Disclosure Policy.
Alerts
28 July 2026
Vulnerability in EShare Application
A vulnerability has been discovered in EShare’s application. Special thanks to the informer and EShare for their involvement as part of CSA's Responsible Vulnerability Disclosure Policy.
Alerts
24 July 2026
Critical Vulnerability in Langflow
Attackers are exploiting a critical severity vulnerability in Langflow to execute arbitrary code. Users and administrators of affected products are advised to apply the latest security updates immediately.
Alerts
23 July 2026
Multiple Critical Vulnerabilities in SolarWinds Serv-U
Attackers can exploit two critical vulnerabilities in SolarWinds Serv-U to perform remote code execution. Patch immediately.
Alerts
16 July 2026
Critical Vulnerability in Zoom Products
Attackers can exploit a critical-severity vulnerability in Zoom to conduct an account takeover via network access. Users and administrators of affected products are advised to apply the latest security updates immediately
Alerts
15 July 2026
Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud
Attackers can exploit critical vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud to gain unauthorised access, modify data and cause denial of service to affected systems. Patch immediately.
Alerts
15 July 2026
July 2026 Monthly Patch
Microsoft has released security patches to address multiple vulnerabilities in their software and products.
Monthly Patch
15 July 2026
Multiple Vulnerabilities in SonicWall SMA1000 Series
Attackers are exploiting two zero-day vulnerabilities in the SMA1000 series appliances to perform server-side request forgery and execute arbitrary operating system commands. Patch immediately.
Alerts
13 July 2026
Vulnerability in Windows File System Proxy (WinFsp)
CSA has issued a CVE ID to a vulnerability reported in WinFsp as part of CSA’s Responsible Vulnerability Disclosure Policy. Users and administrators of the affected product versions are advised to update to the latest version immediately.
Alerts