Critical RCE Flaw in Windows IKE Extension Now Actively Exploited

Critical RCE flaw in Windows IKE Extension now actively exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key Exchange (IKE) Service Extensions component.

Active Exploitation of Windows IKE Extension RCE (CVE-2026-33824)

Active Exploitation of Windows IKE Extension RCE (CVE-2026-33824) 1. Basic Information Article Title: Critical RCE flaw in Windows IKE Extension now actively exploited Source: BleepingComputer Publication Date: 2026-08-19 Severity: Critical Original Source: BleepingComputer Related Sources: Microsoft Security Update Guide, CISA KEV, CrowdStrike Related Entities: CVE-2026-33824, Windows IKE Extension/IKEEXT, IKEv2, IPsec, UDP/500, UDP/4500 …

CISA Adds Microsoft Internet Key Exchange RCE Vulnerability Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Microsoft Internet Key Exchange vulnerability, tracked as CVE-2026-33824, to its Known Exploited Vulnerabilities catalog after confirming exploitation in attacks. The flaw affects Microsoft Internet Key Exchange (IKE) Service Extensions and could allow remote code execution on vulnerable systems. CISA added the vulnerability on August 18, 2026, and set an August 21, 2…

CISA Warns Hackers Are Actively Exploiting VMware vCenter Path Traversal Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Broadcom VMware vCenter to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability, tracked as CVE-2026-59310, is a path traversal flaw that enables arbitrary code execution in affected vCenter deployments. VMware vCenter Path Traversal Flaw CVE-2026-59310 impacts the VMware vCenter Syslog Server component and corresponds to…

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Adds Four Known Exploited Vulnerabilities to Catalog awallace Aug 18, 2026 Release DateAugust 18, 2026 DescriptionCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.  CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityCVE-2026-55040 Microsoft SharePoint Weak Authentication VulnerabilityCVE-2026-59310 Broadcom V…