[CVE-2026-20262]

June 21, 2026

• Cisco patched CVE-2026-20262, an actively-exploited arbitrary-file-write/privilege-escalation flaw in Catalyst SD-WAN Manager (formerly vManage), with a CISA remediation deadline of June 29 (The Register, SecurityWeek). · Vulnerabilities & Exploits

in FortiBleed Exposes 86,000 FortiGate Devices as North Korea's Sapphire Sleet Poisons the Mastra npm Catalog

June 20, 2026

• Cisco patched CVE-2026-20262, a Catalyst SD-WAN Manager (vManage) web-UI flaw enabling authenticated arbitrary file writes and root privilege escalation, under active exploitation — CISA set a June 29 federal deadline. SecurityWeek, The Register · Vulnerabilities & Exploits

in FortiBleed Burns 86,000 FortiGate Devices as Novo Nordisk Loses 1.3TB — Including AI Models — to a Leaked GitHub Token

June 19, 2026

• CVE-2026-20262, a "make-me-root" flaw in Cisco Catalyst SD-WAN Manager, is under active exploitation; CISA set a June 29 federal remediation deadline (SecurityWeek, The Register). · Vulnerabilities & Exploits

in FortiBleed Burns 70,000+ Fortinet Edge Devices While a Leaked GitHub Token Guts Novo Nordisk

June 18, 2026

• Cisco Catalyst SD-WAN Manager CVE-2026-20262 (authenticated arbitrary file write → privesc) is exploited in the wild; CISA mandate to remediate by June 29 (SecurityWeek). · Vulnerabilities & Exploits

in ShinyHunters Burns a PeopleSoft Zero-Day Through Higher Ed as Copilot "SearchLeak" Shows AI Is the New Exfil Channel

June 17, 2026

• Cisco Catalyst SD-WAN Manager zero-day CVE-2026-20262 (CVSS 6.5) — authenticated arbitrary file write enabling privilege escalation — exploited in the wild; CISA mandated remediation by June 29. SecurityWeek, The Hacker News. · Vulnerabilities & Exploits (Actively Exploited)

in Microsoft 365 Copilot 'SearchLeak' Enables One-Click Data Theft as Novo Nordisk Loses Internal AI Models to Extortionists