by Artie Kaye

A monthly update of high severity flaws which are actively being exploited.  If using any of the programs or devices it is advised to take the recommended steps to mitigate.  Wyo Support News may have reported on some of these vulnerabilities in the past.  Below are the items added in August. (Links open in a new browser tab/window.)

Company	CVE	Platform	Details
Adobe	CVE-2023-26359	ColdFusion	https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html
Citrix	CVE-2023-24489	Content Collaboration	https://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489
Ignite Realtime	CVE-2023-32315	Openfire	https://discourse.igniterealtime.org/t/cve-2023-32315-openfire-vulnerability-update/93166 https://www.igniterealtime.org/downloads/#openfire
Ivanti	CVE-2023-38035	Sentry	https://forums.ivanti.com/s/article/CVE-2023-38035-API-Authentication-Bypass-on-Sentry-Administrator-Interface?language=en_US
Microsoft	CVE-2023-38180	.NET Core and Visual Studio	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-38180
RARLAB	CVE-2023-38831	WinRAR	http://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232
Veeam	CVE-2023-27532	Backup & Replication	https://www.veeam.com/kb4424
Zyxel	CVE-2017-18368	P66HN-T1A Routers	https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-a-new-variant-of-gafgyt-malware https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-p660hn-t1a-dsl-cpe