Loading story…
Nokia has issued security advisories addressing critical vulnerabilities in CloudBand Infrastructure Software (CBIS) and Nokia Container Service (NCS). The flaws include an authentication bypass (CVE-2025-49564) and a remote code execution vulnerability (CVE-2023-49565). Users are urged to review the advisories and apply updates promptly.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 references tracked. Mallory keeps watching after this page renders.
securityonline.info
Open sourcesecurityonline.info
Open sourcecyber.gc.ca
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Several major vendors, including Dell, IBM, and CISA, have released security advisories addressing vulnerabilities in a wide range of enterprise and industrial control system products. Dell's advisories cover critical updates for products such as APEX Cloud Platform for Red Hat OpenShift, Enterprise SONiC Distribution, NetWorker, PowerSwitch models, and iDRAC controllers, urging administrators to apply patches to mitigate potential risks. IBM has similarly published advisories for multiple products, while CISA has issued alerts for vulnerabilities in industrial control systems from vendors like ABB, Advantech, Delta Electronics, Fuji Electric, IDIS, Radiometrics, Survision, and Ubia, recommending prompt mitigation and updates. In addition to these broad advisories, a critical denial-of-service vulnerability (CVE-2024-20399) was identified in Cisco's Identity Services Engine (ISE), which could allow unauthenticated attackers to crash network access control systems by exploiting the RADIUS protocol. Cisco has provided both temporary and permanent mitigation steps for affected versions. Separately, CISA added a Samsung Mobile Devices out-of-bounds write vulnerability (CVE-2025-21042) to its Known Exploited Vulnerabilities Catalog, highlighting the ongoing risk posed by actively exploited flaws and urging organizations to prioritize remediation to protect against cyber threats.
Jun 29, 2026
Fortinet, Ivanti, and SAP have released urgent security updates to address multiple critical vulnerabilities in their respective products, with potential impacts including authentication bypass, remote code execution, and stored cross-site scripting. Fortinet's advisories detail two flaws (CVE-2025-59718 and CVE-2025-59719, CVSS 9.8) in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager, which could allow unauthenticated attackers to bypass FortiCloud SSO login authentication via crafted SAML messages if the feature is enabled. Ivanti has patched four vulnerabilities in Endpoint Manager, including a critical stored XSS flaw (CVE-2025-10573, CVSS 9.6) that could let remote attackers execute arbitrary JavaScript in administrator sessions. Organizations are advised to disable FortiCloud SSO login as a temporary mitigation and apply all available updates promptly. SAP's December security updates address 14 vulnerabilities, including three critical flaws. The most severe, CVE-2025-42880 (CVSS 9.9), is a code injection vulnerability in SAP Solution Manager that could grant attackers full system control. Additional critical issues include CVE-2025-55754 (CVSS 9.6), affecting SAP Commerce Cloud due to Apache Tomcat vulnerabilities, and CVE-2025-42928 (CVSS 9.1), a deserialization flaw in SAP jConnect that could enable remote code execution. SAP's bulletin also includes fixes for several high- and medium-severity vulnerabilities across its product suite, underscoring the need for immediate patching to mitigate exploitation risks.
Jun 29, 2026
Cisco has released security updates to address multiple high-severity vulnerabilities affecting its Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, IP Phone 8821, and Video Phone 8875 products. The most notable flaw, tracked as CVE-2025-20350, is a denial-of-service (DoS) vulnerability that could allow remote attackers to disrupt the normal operation of affected devices. According to Cisco's advisories, the vulnerabilities impact devices running versions prior to 3.3(1) for the Desk Phone 9800 Series, prior to 14.4(1) for the IP Phone 7800 and 8800 Series, prior to 11.0(6)SR7 for the IP Phone 8821, and prior to 3.3(1) for the Video Phone 8875. The Canadian Centre for Cyber Security (CCCS) has also issued an alert, urging organizations to review Cisco's advisories and apply the recommended patches and mitigations without delay. The vulnerabilities include both denial-of-service and information disclosure issues, with some flaws related to SIP software and others affecting the underlying RoomOS and TelePresence Collaboration Endpoint software. Cisco's advisories detail that exploitation of these vulnerabilities could result in service interruptions, potentially impacting business communications and operations. The company has provided specific version updates to remediate the risks, and administrators are advised to upgrade to the latest secure releases. The advisories also mention vulnerabilities in Cisco's Snort 3 software, but the primary focus is on the telephony products. No active exploitation of these vulnerabilities has been reported at the time of the advisories, but the critical nature of the flaws warrants immediate attention. The updates are part of Cisco's ongoing efforts to address security weaknesses in its widely deployed communication devices. Organizations using affected Cisco phone models should prioritize patching to prevent potential denial-of-service attacks that could disrupt voice and video communications. The CCCS highlights the importance of following Cisco's mitigation guidance to ensure continued secure operation of telephony infrastructure. Cisco's prompt response and detailed advisories provide clear remediation steps for network administrators. The vulnerabilities underscore the need for regular patch management and vigilance in monitoring vendor security updates. Failure to address these issues could expose organizations to service outages and potential information leaks. The advisories serve as a reminder of the critical role that secure communication endpoints play in enterprise environments. By applying the recommended patches, organizations can mitigate the risk of disruption and maintain the integrity of their communication systems.
Jun 29, 2026