Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
3 matching stories
CISA KEV274 Zimbra Servers Compromised in the Wild via CVE-2026-73570
Shadowserver found 274 internet-facing Zimbra Collaboration Suite servers compromised in-the-wild via CVE-2026-73570, an unauthenticated OS command injection in the zimbra-snmp package that lets attackers execute arbitrary commands as the zimbra user via crafted SMTP requests.
CISA KEV adds N-Able N-Central RCE with 3-day federal deadline
CISA added CVE-2026-18556 to its Known Exploited Vulnerabilities catalog for N-able N-central, an unauthenticated authentication bypass that grants remote administrative access on versions through 2026.1, with a 3-day federal deadline and active in-the-wild exploitation.
Cisco confirms FMC auth-bypass CVE-2026-20079 exploited in the wild
Cisco updated its advisory for CVE-2026-20079, a critical authentication bypass in Cisco Secure Firewall Management Center, confirming active exploitation after PSIRT became aware in August 2026; CISA added the CVE to its KEV catalog with a September 12, 2026 due date for FCEB agencies.
