SecPod

Learn Search

Search across all Learn content

SecPod Labs

Security Research

In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.

Open Apple Security Updates March 2020 and Adobe Creative Cloud Critical Security Update

Apple Security Updates March 2020 and Adobe Creative Cloud Critical Security Update

CVE Research

Apple Security Updates March 2020 and Adobe Creative Cloud Critical Security Update

Apple finally released Security Updates in March 2020 for multiple products today. A total of 49 vulnerabilities were addressed. However, Exploiting some of these security flaws could allow an attacker to take control of an affected system. Hence, Vulnerability Management System is the solution to t

Sep 17, 2026 • 6 min read

Open Internet Explorer/Edge XXE (XML External Entity) Zero-Day Vulnerability

Internet Explorer/Edge XXE (XML External Entity) Zero-Day Vulnerability

CVE Research

Internet Explorer/Edge XXE (XML External Entity) Zero-Day Vulnerability

A Zero-day vulnerability is in discovery by Internet Explorer that can allow attackers to steal files from Windows systems. The vulnerability resides in how Internet Explorer processes MHT(MIME HTML web archive) files and can easily exploit them by tricking users into opening a specially crafted MHT

Sep 17, 2026 • 4 min read

Open Adobe Releases Critical Security Updates June 2020

Adobe Releases Critical Security Updates June 2020

CVE Research

Adobe Releases Critical Security Updates June 2020

Adobe has released critical security updates to its products like Adobe After Effects, Illustrator 2020, Adobe Campaign Classic, and others in order to patch multiple critical vulnerabilities which can lead to arbitrary code execution and information disclosure. This month’s release consists of 19 v

Sep 17, 2026 • 3 min read

Open Patch Analysis & Exploitation Timeline: Three CVEs, One Deadline, CISA's September 16, 2026 KEV Additions for Google Pixel, Cisco ISE, and Acronis Backup
Patch Analysis & Exploitation Timeline: Three CVEs, One Deadline, CISA's September 16, 2026 KEV Additions for Google Pixel, Cisco ISE, and Acronis Backup

CVE Research

Patch Analysis & Exploitation Timeline: Three CVEs, One Deadline, CISA's September 16, 2026 KEV Additions for Google Pixel, Cisco ISE, and Acronis Backup

An analysis of three vulnerabilities added to CISA’s Known Exploited Vulnerabilities Catalog on September 16, 2026, covering Google Pixel, Cisco Identity Services Engine, and Acronis Backup, including their technical impact, vulnerability classifications, and three-day remediation deadlines.

Sep 17, 2026 • 8 min read

Open Patch Analysis & Exploitation Timeline: CVE-2026-76461 Zero-Day Gap for Cisco Secure Email Gateway, September 14, 2026
Patch Analysis & Exploitation Timeline: CVE-2026-76461 Zero-Day Gap for Cisco Secure Email Gateway, September 14, 2026

CVE Research

Patch Analysis & Exploitation Timeline: CVE-2026-76461 Zero-Day Gap for Cisco Secure Email Gateway, September 14, 2026

Sep 16, 2026

Open BlueMoon: The Exploit Kit Powering Multiple Spy Groups and Zero-Day Attacks
BlueMoon: The Exploit Kit Powering Multiple Spy Groups and Zero-Day Attacks

CVE Research

BlueMoon: The Exploit Kit Powering Multiple Spy Groups and Zero-Day Attacks

Sep 16, 2026 • 5 min read

Open CVE-2026-76461: Critical Cisco Secure Email Gateway SQL Injection Flaw Under Active Exploitation
CVE-2026-76461: Critical Cisco Secure Email Gateway SQL Injection Flaw Under Active Exploitation

CVE Research

CVE-2026-76461: Critical Cisco Secure Email Gateway SQL Injection Flaw Under Active Exploitation

Sep 16, 2026

Open Plex Releases Security Fixes for Media Server and Desktop Clients - Users Urged to Update Immediately
Plex Releases Security Fixes for Media Server and Desktop Clients - Users Urged to Update Immediately

CVE Research

Plex Releases Security Fixes for Media Server and Desktop Clients - Users Urged to Update Immediately

Plex has released security updates for Plex Media Server and Plex Desktop and is urging users to upgrade immediately. Plex Media Server v1.43.2 and earlier should be moved to version 1.43.3; Plex Desktop should be updated to 1.115.0. CVE identifiers have been requested, and full technical details are not public yet. This article covers the fixed versions, how to update across Windows, macOS, Linux, NAS, Docker, and other platforms, and what administrators should do now.

Sep 15, 2026

Open From Gitea Exploitation to Root Access: Uncovering Red Heron’s Global Attack Campaign
From Gitea Exploitation to Root Access: Uncovering Red Heron’s Global Attack Campaign

CVE Research

From Gitea Exploitation to Root Access: Uncovering Red Heron’s Global Attack Campaign

Sep 15, 2026