News 2
-
NewsExploited Nextcloud CODE server and VeloCloud flaws get 3-day KEV deadline
CISA listed an exploited command injection in the Collabora CODE app for Nextcloud and a VeloCloud Orchestrator SQL injection, both due 26 October with triage.
-
NewsExploited Cisco SD-WAN Manager flaw gives attackers admin API access
CISA added a critical Cisco Catalyst SD-WAN Manager authentication bypass to its KEV catalog with a three-day federal deadline and a required compromise check.