Critical Cyber Threats: Cisco, Kentico, and Zimbra Flaws Fuel Fresh Exploits

Just when organizations thought their digital fortresses were secure, a new surge of exploited software flaws has shattered the illusion. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has sounded a stark warning: major vulnerabilities in Cisco, Kentico, and Zimbra products are not just theoretical risks-they are actively being targeted by cybercriminals. The race is now on for organizations to patch up their defenses before they become the next victim.

The Anatomy of an Attack: Old Bugs, New Victims

CISA’s latest update to its KEV catalog is more than just a bureaucratic list-it’s a signpost for active cyber threats. Among the most urgent are three vulnerabilities in Cisco Catalyst SD-WAN Manager (CVE-2026-20133, CVE-2026-20122, and CVE-2026-20128). These flaws, patched only in February, allow attackers to bypass file system restrictions and access sensitive information on compromised systems. With SD-WAN technology underpinning many critical business networks, the implications of such a breach can be far-reaching, from data theft to network disruption.

But Cisco isn’t alone in the crosshairs. Kentico Xperience, a popular content management platform, harbors a particularly dangerous flaw (CVE-2025-2749): a path traversal and arbitrary file upload vulnerability. Exploiting this weakness, hackers can upload malicious files and execute code remotely-potentially taking full control of affected servers. While successful exploitation requires authentication, attackers often combine multiple flaws to bypass such safeguards, as demonstrated in recent attack chains.

Zimbra Collaboration Suite (ZCS) also faces renewed scrutiny after CISA added an XSS vulnerability (CVE-2025-48700) to the KEV list. This bug enables attackers to inject and execute malicious JavaScript by tricking users into opening crafted messages, compromising email accounts and potentially spreading malware further within organizations.

The urgency is underscored by CISA’s deadlines: federal agencies must patch Cisco and Zimbra issues by April 23 and the remaining flaws by May 4. The inclusion of older vulnerabilities-such as those in Quest KACE, JetBrains TeamCity, and PaperCut-highlights a recurring problem: attackers routinely exploit known, unpatched bugs for months or even years after disclosure.

Reflections: The Cost of Complacency

As cybercriminals grow more resourceful, the cost of ignoring security updates grows steeper. The latest wave of exploited vulnerabilities is a stark reminder: patching is not optional, and the window for defensive action is shrinking. For organizations relying on Cisco, Kentico, Zimbra, and other affected platforms, the time to act is now-before today’s overlooked bug becomes tomorrow’s headline breach.

WIKICROOK

• Vulnerability: A vulnerability is a weakness in software or systems that attackers can exploit to gain unauthorized access, steal data, or cause harm.
• Remote Code Execution (RCE): Remote Code Execution (RCE) is when an attacker runs their own code on a victim’s system, often leading to full control or compromise of that system.
• Cross: Cross-Site Scripting (XSS) is a cyberattack where hackers inject malicious code into websites to steal user data or hijack sessions.
• Patch: A patch is a software update released to fix security vulnerabilities or bugs in programs, helping protect devices from cyber threats and improve stability.
• Path Traversal: Path Traversal is a security flaw where attackers manipulate file paths to access files or data outside a system's intended boundaries.