From: alerts@vulnyk.com · Apr 14, 2026 · Just now
⚠️ 12 CVEs matched your stack — 2 actively exploited, immediate action required
🚨 Actively Exploited — Patch Immediately
KEV CVE-2026-25177 · CVSS 9.8 CRITICAL
Microsoft Active Directory Domain Services
A privilege escalation flaw allows authenticated attackers to gain full SYSTEM control. No user interaction required. Ransomware campaigns are actively using this vulnerability. Apply Microsoft's Patch Tuesday update immediately — this cannot wait for your next scheduled maintenance window.
→ View full analysis and patch guidance in your dashboard
KEV CVE-2026-18823 · CVSS 9.6 CRITICAL
Fortinet FortiGate — FortiOS
Authentication bypass in the FortiGate management interface allows unauthenticated remote access to your firewall. Actively exploited. Upgrade FortiOS now and restrict management access to trusted IPs immediately.
→ View full analysis and patch guidance in your dashboard
🟠 Critical — Patch Immediately
CVE-2026-21340 · CVSS 9.8 CRITICAL
Cisco IOS XE — Web UI
Unauthenticated remote code execution. No credentials required. Apply Cisco Security Advisory immediately or disable the HTTP/HTTPS server on affected devices.
→ View full analysis in your dashboard
+ 9 more CVEs matched your stack · View all in your Vulnyk dashboard →