A critical Fortinet FortiSIEM vulnerability with publicly available proof-of-concept exploit code is now being abused in attacks. Security researcher Zach Hanley from Horizon3.ai reported vulnerability CVE-2025-64155, which combines two issues that enable arbitrary writes with admin permissions and privilege escalation to root access. “An improper neutralization of special elements used …

Cisco has confirmed that a serious zero-day vulnerability allowing remote code execution is being actively exploited in its Secure Email Gateway and Secure Email and Web Manager appliances. The CVE-2025-20393 flaw lets unauthorized attackers run arbitrary root commands by sending specific HTTP requests to the Spam Quarantine feature. Cisco aware …

Palo Alto Networks fixed a vulnerability that could let attackers to disable firewall protections in DoS attacks. CVE-2026-0227 is a security issue impacting next-gen firewalls using PAN-OS 10.1 or later and Prisma Access configurations when the GlobalProtect gateway or portal is active. The cybersecurity company reports that most cloud-based Prisma …