#cisa-kev — Security Blog | RadicalNotion.AI

Critical Oracle PeopleSoft RCE Flaw Actively Exploited in the Wild

A maximum-severity, no-authentication-required remote code execution vulnerability in Oracle PeopleSoft PeopleTools 8.61 and 8.62 is being actively exploited, giving attackers full control over ERP systems holding sensitive HR, financial, and operational data.

Radical Notion Team1 month ago

CVE-2026-7473: Arista EOS Tunnel Bypass Flaw Exploited in the Wild, No Patch Planned

A critical flaw in Arista EOS allows unauthenticated attackers to inject traffic into internal network segments by abusing tunnel decapsulation endpoints — and Arista says no software patch is coming. The vulnerability is actively being exploited and has been added to CISA's Known Exploited Vulne...

Radical Notion Team1 month ago

CVSS 10.0: Cisco SD-WAN Auth Bypass Exploited in the Wild

A perfect-10 authentication bypass in Cisco's SD-WAN Controller and Manager lets unauthenticated attackers seize control of enterprise wide-area networks. Cisco confirms active exploitation, CISA issues Emergency Directive 26-03.

Radical Notion Team5 months ago

CVE-2008-0015: CISA Adds Actively Exploited Microsoft Video ActiveX Stack Overflow to KEV Catalog

CISA added CVE-2008-0015 to its Known Exploited Vulnerabilities catalog on February 17, 2026, confirming active exploitation of a critical stack-based buffer overflow in Microsoft's Video ActiveX control that allows complete system takeover via a malicious webpage.

Radical Notion Team5 months ago

#cisa-kev — Security Blog | RadicalNotion.AI