AllTechSecurity Advisories
Vulnerabilities and active threats that affect small and mid-sized organizations: who is exposed, fixed versions, and what to check first.
SonicWall SSLVPN CVE-2026-19868: SAML MFA Bypass
CISA lists SonicWall SonicOS flaw CVE-2026-19868 as exploited. With SAML on for SSLVPN, MFA can be bypassed. Fixed versions and what to check.
Read the article →
Ivanti Connect Secure Zero-Days: Patch and Check
Attackers chained three Ivanti Connect Secure flaws to get root on VPN appliances. CISA lists all three as exploited. Fixed versions and checks.
Cisco ASA and FTD VPN Flaw: Remote Reload Bug
CISA lists Cisco ASA and FTD flaw CVE-2026-76418 as exploited. A crafted VPN request can reload the firewall. Affected setups, fixed versions, steps.
BeyondTrust Remote Support Zero-Day: What to Check
CVE-2026-102764 let a China-linked group take over BeyondTrust Remote Support appliances. Who is affected, how to patch, and how to spot a breach.
FortiOS CVE-2025-61624: Admin Bug Leads to Root
CISA lists FortiOS flaw CVE-2025-61624 as exploited. It needs admin access, but attackers used it to reach root. Affected versions and what to do.
Ransomware Gangs Exploit PAN-OS GlobalProtect Flaw
Qilin and Inc operators are attempting CVE-2026-0257 against Palo Alto GlobalProtect VPNs. Who is affected, fixed versions, and what to check first.
PHP2Shell: Two Critical PHP Flaws, What to Do Now
PHP2Shell lets an unauthenticated attacker run code on servers that serve PHP. Fixed versions, where PHP hides in your business, and what to do first.
