CISAAnalysis1 min read

CISA adds Linux kernel Fragnesia and VMware ESX flaws to KEV catalog

What happened.CISA added the Linux kernel Fragnesia privilege escalation flaw and a VMware ESX logging defect to its Known Exploited Vulnerabilities catalog following active in-the-wild exploitation.

Why it matters.Container environments and service sandboxes rely entirely on kernel memory boundaries. When network socket handling allows unprivileged processes to alter file-backed memory caches directly, local access controls fail completely. Systems administrators must upgrade host kernels and virtualized infrastructure nodes immediately. Engineering teams should audit system logs for unauthorized TCP encapsulation activity.

↳Continues: CISA adds critical PHP2Shell vulnerabilities to KEV catalog

Read Full Brief →

Source:CISA

VERIFIED STORIES IN THIS EDITION3 STORIES

CiscoAnalysis1 min read

Cisco warns of active ASA and FTD SSL VPN denial of service attacks

What happened.Cisco published a high-severity security advisory warning that threat actors are actively targeting an unauthenticated denial of service vulnerability affecting Secure Firewall ASA and Threat Defense software.

↳Continues: Cisco evaluates PHP2Shell enterprise exposure and deploys detection rules

Source:Cisco Security Advisories

MicrosoftAnalysis1 min read

Microsoft fixes critical ASP.NET Core Kestrel HTTP request smuggling flaw

What happened.Microsoft released security updates addressing a critical security feature bypass vulnerability in the ASP.NET Core Kestrel web server engine that allows remote HTTP request smuggling.

↳Continues: Microsoft issues out-of-band updates to revoke compromised eMudhra CA keys

Source:Microsoft Security Response Center

AmazonAnalysis1 min read

AWS updates Lambda and container runtimes for Brotli Node2Shell flaw

What happened.Amazon Web Services published security bulletin AWS-2026-155 detailing patched managed runtimes and container images to address an out-of-bounds write vulnerability in the native Brotli compression library.

↳Continues: Microsoft patches critical Brotli buffer overflow in .NET

Source:AWS Security Bulletins

DEVELOPER WIRE

AWS Strands Agents Tools secret masking bypass (CVE-2026-115415)

Advisory detailing environment variable exposure via prompt injection in strands-agents-tools. Held on watchlist pending ecosystem package validation.

STATUS:Awaiting official documentation or verification criteria.

DEVELOPER WIRE

Adobe Commerce and Magento arbitrary file upload flaw (CVE-2026-48356)

Added to CISA KEV catalog for active exploitation. Held on watchlist pending release of customer remediation metrics.

STATUS:Awaiting official documentation or verification criteria.

DEVELOPER WIRE

Next.js unauthenticated cache and image optimization RCE

Critical CVSS 9.5 advisories affecting Next.js 15 and 16. Held on watchlist pending official CVE assignment and public telemetry updates.

STATUS:Awaiting official documentation or verification criteria.

CISA adds Linux kernel Fragnesia and VMware ESX flaws to KEV catalog

Cisco warns of active ASA and FTD SSL VPN denial of service attacks

Microsoft fixes critical ASP.NET Core Kestrel HTTP request smuggling flaw

AWS updates Lambda and container runtimes for Brotli Node2Shell flaw

The Discovery Wire · Unverified Attention Signals

AWS Strands Agents Tools secret masking bypass (CVE-2026-115415)

Adobe Commerce and Magento arbitrary file upload flaw (CVE-2026-48356)

Next.js unauthenticated cache and image optimization RCE

Key Details