CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks

CISA Adds CVE-2018-4063 to Exploited Vulnerabilities Amid Active Router Attacks

The Resurrected Threat: Old Router Flaw Awakens to Menace Critical Networks In a move underscoring the persistent dangers lurking in outdated technology, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has thrust a seven-year-old vulnerability back into the spotlight. On December 13, 2025, CISA added a flaw in Sierra Wireless AirLink routers to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation by c…

CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity flaw impacting Sierra Wireless AirLink ALEOS routers to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. CVE-2018-4063 (CVSS score: 8.8/9.9) refers to an unrestricted file upload vulnerability that could be exploited to achieve remote code