Root access to Cisco Catalyst SD-WAN Manager via unvalidated file uploads enables network-wide control plane vulnerability with impact on branch availability, segmentation, and business continuity.
Ubiquiti UniFi OS contains multiple critical security vulnerabilities that can lead to unauthenticated code execution, information disclosure, and privilege escalation.
A 19-year-old validation flaw in the CIFS kernel subsystem allows local attackers to gain root privileges through forged authentication requests and NSS library manipulation.
CVE-2026-20245 in Cisco SD-WAN Manager is actively being exploited and requires local authentication and netadmin privileges, but can be chained with exploits of older authentication bypass vulnerabilities.
CVE-2025-48595 in the Android Framework enables privilege escalation already being exploited on devices running Android 14 or newer and is being actively weaponized by commercial spyware and state-sponsored actors against journalists and decision-makers.