GoKawiilEclypsium report finds infrastructure management platforms top target for exploited flaws
Eclypsium's September InfraTrust Pulse report logged 158 new security advisories across 17 vendors between August 25 and September 17, covering 1,699 vulnerabilities. Of these, 42 were rated critical, eight scored a maximum 10.0 severity, 71 could be exploited remotely without authentication, and five advisories included flaws later added to CISA's Known Exploited Vulnerabilities catalog. The report singles out a maximum-severity Cisco Secure Firewall Management Center authentication bypass, CVE-2026-20079, which Cisco confirmed on September 9 was being actively exploited, allowing attackers to run commands as root without credentials.
GoKawiil's interpretation of the reporting above, not reported fact.
Eclypsium notes this is the second straight month that the most dangerous exploited flaws have appeared in administrative and management software rather than the devices themselves, suggesting attackers see these control platforms as high-value single points of failure. Compromising a management console can hand an attacker control over an entire fleet of connected devices at once, which could make patching and hardening these systems a higher priority than individual endpoints. The recurring pattern across two months may indicate a deliberate shift in attacker focus, according to the report's authors.
- 158 advisories covering 1,699 vulnerabilities were tracked across 17 vendors in under a month
- 42 advisories were critical and five contained flaws added to CISA's Known Exploited Vulnerabilities list
- A maximum-severity Cisco Firewall Management Center bug (CVE-2026-20079) is being actively exploited to gain root access
YubiKey 5 Series Security Key — With management systems and network infrastructure under increasing attack, hardware-backed authentication is one of the strongest defenses against unauthorized access to critical admin consoles. A YubiKey adds phishing-resistant multi-factor authentication to protect logins for the very systems attackers are targeting.
See YubiKey 5 Series Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-23
Published there as: “InfraTrust report warns network management systems under attack”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.