PAN-OS, cPanel, Ivanti EPMM — 3 exploited CVEs

CyberSignalDaily — exploited vulnerability signals, no hype.

Daily briefing covering 3 CVEs published in 2026 that are also in
the CISA Known Exploited Vulnerabilities Catalog. Selection rule:
NVD publication date is 2026-01-01 or later, AND the CVE appears
in CISA KEV. Sorted oldest first. New briefing every 24 hours.

About the on-screen WEAKNESS field:
CWE is the Common Weakness Enumeration — MITRE's catalogue of
software-weakness types. CVE = the specific bug, CWE = the family
of bugs it belongs to.

Signals in this briefing:

1. CVE-2026-0300 — PAN-OS heap overflow
- NVD published: 2026-05-06
- CISA KEV date added: 2026-05-06
- Vendor: Palo Alto Networks
- Product: PAN-OS
- Severity: CRITICAL
- CVSS v3.1: 9.8
- CWE: CWE-787 / OOB Write
- Context: Palo Alto PAN-OS has a heap-based out-of-bounds write reachable pre-authentication on management interfaces. CVSS 9.8.
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-0300
- CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- CWE: https://cwe.mitre.org/data/definitions/787.html

2. CVE-2026-41940 — cPanel unauth bypass
- NVD published: 2026-04-29
- CISA KEV date added: 2026-04-30
- Vendor: WebPros
- Product: cPanel & WHM and WP2 (WordPress Squared)
- Severity: CRITICAL
- CVSS v3.1: 9.8
- CWE: CWE-306 / Missing Auth
- Context: Ransomware-known per CISA. cPanel and WHM expose privileged operations without authentication, letting any attacker reach admin functions on the hosting panel.
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41940
- CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- CWE: https://cwe.mitre.org/data/definitions/306.html

3. CVE-2026-6973 — Ivanti EPMM input val
- NVD published: 2026-05-07
- CISA KEV date added: 2026-05-07
- Vendor: Ivanti
- Product: Endpoint Manager Mobile (EPMM)
- Severity: HIGH
- CVSS v3.1: 7.2
- CWE: CWE-20 / Input Validation
- Context: Ivanti Endpoint Manager Mobile improperly validates input, allowing an authenticated attacker to extract sensitive device data.
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6973
- CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- CWE: https://cwe.mitre.org/data/definitions/20.html

Affected versions: see each NVD detail page for the authoritative
configuration list.

Sources:
- CISA KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- NVD CVE records: https://nvd.nist.gov/vuln
- CWE: https://cwe.mitre.org/

Defensive awareness only. No exploit guidance.

#shorts #cybersecurity #infosec #cve #cisakev #cwe #cvss #paloalto #panos #webpros #cpanel #whm #hosting #ivanti #epmm #cybersignaldaily #hack #hacker

Видео PAN-OS, cPanel, Ivanti EPMM — 3 exploited CVEs канала CyberSignalDaily