Infratrust - GoKawiil

Eclypsium report finds active exploitation of PHP flaws in network appliances

Eclypsium's October InfraTrust Pulse report tracked 133 new security advisories across 18 vendors between September 18 and October 14, covering 2,813 vulnerabilities, with 37 rated critical and 58 exploitable remotely without authentication. The report highlights so-called PHP2Shell flaws affecting PHP code embedded in the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances, noting that 16 advisories involved vulnerabilities already listed in CISA's Known Exploited Vulnerabilities catalog.

bleepingcomputer.com · 2026-10-28

Eclypsium report finds infrastructure management platforms top target for exploited flaws

Eclypsium's September InfraTrust Pulse report logged 158 new security advisories across 17 vendors between August 25 and September 17, covering 1,699 vulnerabilities. Of these, 42 were rated critical, eight scored a maximum 10.0 severity, 71 could be exploited remotely without authentication, and five advisories included flaws later added to CISA's Known Exploited Vulnerabilities catalog. The report singles out a maximum-severity Cisco Secure Firewall Management Center authentication bypass, CVE-2026-20079, which Cisco confirmed on September 9 was being actively exploited, allowing attackers to run commands as root without credentials.

bleepingcomputer.com · 2026-09-23