【CVE-2026-20122】Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability (CVSS v3.1: 5.4)
【Whether exploited by ransomware: Unknown】 Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability. An attacker can exploit this vulnerability by uploading a malicious file to the local file system. After successful exploitation, the attacker can overwrite arbitrary files on the affected system and obtain vmanage user privileges.

【CVE-2026-20133】Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVSS v3.1: 6.5)
【Whether exploited by ransomware: Unknown】 Cisco Catalyst SD-WAN Manager contains a vulnerability that exposes sensitive information to an unauthorized actor, which may allow a remote attacker to view sensitive information on the affected system.

【CVE-2025-2749】Kentico Xperience Path Traversal Vulnerability (CVSS v3.1: 7.2)
【Whether exploited by ransomware: Unknown】 Kentico Xperience contains a path traversal vulnerability, which may allow an authenticated user’s Staging Sync Server to upload arbitrary data to a relative path location.

【CVE-2023-27351】PaperCut NG/MF Improper Authentication Vulnerability (CVSS v3.1: 8.2)
【Whether exploited by ransomware: Known】 PaperCut NG/MF contains an improper authentication vulnerability, which may allow a remote attacker to bypass authentication on affected installations through the SecurityRequestFilter class.

【CVE-2025-48700】Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability (CVSS v3.1: 6.1)
【Whether exploited by ransomware: Unknown】 Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability, which may allow an attacker to execute arbitrary JavaScript in a user session, thereby leading to unauthorized access to sensitive information.

【CVE-2026-20128】Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability (CVSS v3.1: 7.5)
【Whether exploited by ransomware: Unknown】 Cisco Catalyst SD-WAN Manager contains a vulnerability in which passwords are stored in a recoverable format, allowing an authenticated local attacker with low-privileged user access to access the credential file of the DCA user in the file system, thereby obtaining DCA user privileges.

【CVE-2025-32975】Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability (CVSS v3.1: 10.0)
【Whether exploited by ransomware: Unknown】 Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user without valid credentials.