MEDIUMVulnerability
Global

In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw

·Source: Dark Reading

Updated:

Executive Summary

The flaw enables server-side request forgery (SSRF) and escalates privileges to root, impacting Cisco Unified CM and Unified CM SME deployments.

Analysis

The flaw enables server-side request forgery (SSRF) and escalates privileges to root, impacting Cisco Unified CM and Unified CM SME deployments.
Source Attribution

Originally published by Dark Reading on Jun 25, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Canadian fintech Float raises C$85m

Canadian business finance platform Float Financial has raised C$85 million (US$60 million) in a Series C funding round led by Inovia Capital with participation from Goldman Sachs.

Finextra
MEDIUMVulnerability

YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th)

YARA-X&&#x23&#x3b;x26&#x3b;&#x23&#x3b;39&#x3b;s 1.18.0 release brings 3 improvements and 2 bugfixes.

SANS ISC
CRITICALVulnerability

NVD CRITICAL: CVE-2026-58053 — Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow...

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-opt unchanged. A user who can run a workflow on a Docker-backed runner can create a job container with

CVE-2026-58053
NIST NVD