Security Briefs
Page 4 of 21.
Alerts tracked
2625
Security flaws we track for Upstate SC businesses.
Known exploited
503
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
43
Fresh additions to that CISA list since the first of the month.Feeds last synced Aug 19, 2026, 6:00 AM UTC.
Showing page 4 (24 alerts) of 503.
JetBrains TeamCity Relative Path Traversal Vulnerability
JetBrains TeamCity is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2024-27199). JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed. CISA remediation due date: 2026-05-04. If you need help checking exposure, call (864) 335-9223.
PaperCut NG/MF Improper Authentication Vulnerability
PaperCut NG/MF is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2023-27351). PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class. CISA remediation due date: 2026-05-04. If you need help checking exposure, call (864) 335-9223.
Apache ActiveMQ Improper Input Validation Vulnerability
Apache ActiveMQ is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-34197). Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection. CISA remediation due date: 2026-04-30. If you need help checking exposure, call (864) 335-9223.
Microsoft SharePoint Server Improper Input Validation Vulnerability
Microsoft SharePoint Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-32201). Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network. CISA remediation due date: 2026-04-28. If you need help checking exposure, call (864) 335-9223.
Microsoft Office Remote Code Execution vulnerability
Microsoft Office is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2009-0238). Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object. CISA remediation due date: 2026-04-28. If you need help checking exposure, call (864) 335-9223.
Adobe Acrobat and Reader Prototype Pollution Vulnerability
Adobe Acrobat and Reader is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-34621). Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. CISA remediation due date: 2026-04-27. If you need help checking exposure, call (864) 335-9223.
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet FortiClient EMS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-21643). Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. CISA remediation due date: 2026-04-16. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Link Following Vulnerability
Microsoft Windows is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-60710). Microsoft Windows contains a link following vulnerability that allows for privilege escalation CISA remediation due date: 2026-04-27. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Out-of-Bounds Read Vulnerability
Microsoft Windows is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2023-36424). Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation CISA remediation due date: 2026-04-27. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2023-21529). Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. CISA remediation due date: 2026-04-27. If you need help checking exposure, call (864) 335-9223.
Adobe Acrobat Use-After-Free Vulnerability
Adobe Acrobat is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2020-9715). Adobe Acrobat contains a use-after-free vulnerability that allows for code execution CISA remediation due date: 2026-04-27. If you need help checking exposure, call (864) 335-9223.
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
Microsoft Visual Basic for Applications (VBA) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2012-1854). Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. CISA remediation due date: 2026-04-27. If you need help checking exposure, call (864) 335-9223.
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-1340). Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution. CISA remediation due date: 2026-04-11. PremierePC tracks KEV alerts for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Fortinet FortiClient EMS Improper Access Control Vulnerability
Fortinet FortiClient EMS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-35616). Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. CISA remediation due date: 2026-04-09. If you need help checking exposure, call (864) 335-9223.
Google Dawn Use-After-Free Vulnerability
Google Dawn is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-5281). Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. This vulnerability could affect multiple Chromium-based products including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA remediation due date: 2026-04-15. If you need help checking exposure, call (864) 335-9223.
Citrix NetScaler Out-of-Bounds Read Vulnerability
Citrix NetScaler is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-3055). Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread. CISA remediation due date: 2026-04-02. If you need help checking exposure, call (864) 335-9223.
Apple Multiple Products Classic Buffer Overflow Vulnerability
Apple Multiple Products is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-43520). Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory. CISA remediation due date: 2026-04-03. If you need help checking exposure, call (864) 335-9223.
Apple Multiple Products Improper Locking Vulnerability
Apple Multiple Products is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-43510). Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes. CISA remediation due date: 2026-04-03. If you need help checking exposure, call (864) 335-9223.
Apple Multiple Products Buffer Overflow Vulnerability
Apple Multiple Products is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-31277). Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption. CISA remediation due date: 2026-04-03. If you need help checking exposure, call (864) 335-9223.
Secure Firewall Management Center (FMC) vulnerability
Cisco Secure Firewall Management Center (FMC) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-20131). Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. CISA remediation due date: 2026-03-22. If you need help checking exposure, call (864) 335-9223.
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-20963). Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. CISA remediation due date: 2026-03-21. If you need help checking exposure, call (864) 335-9223.
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Google Chromium V8 is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-3910). Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA remediation due date: 2026-03-27. If you need help checking exposure, call (864) 335-9223.
Google Skia Out-of-Bounds Write Vulnerability
Google Skia is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-3909). Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products. CISA remediation due date: 2026-03-27. If you need help checking exposure, call (864) 335-9223.
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
Ivanti Endpoint Manager (EPM) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-1603). Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticated attacker to leak specific stored credential data. CISA remediation due date: 2026-03-23. PremierePC tracks KEV alerts for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.