Advisories
Critical Path Traversal in Fortinet FortiMail Under Active Exploitation (CVE-2026-104286)
A critical FortiMail zero-day disclosed October 1st lets unauthenticated attackers write arbitrary files to the appliance and is already being exploited, with fixed releases not yet available
Oct 1, 2026 - 6 Min Read
Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Under Active Exploitation (CVE-2026-76504)
On September 30th, 2026, Cisco disclosed a critical vulnerability in Cisco Catalyst SD-WAN Manager and confirmed it has been exploited in the wild. Tracked as CVE-2026-76504, the flaw lets an unauthenticated, remote attacker bypass authentication on the Manager's API and gain access with the privileges of the admin user. The vulnerability affects SD-WAN Manager regardless of system configuration.
Sep 30, 2026 - 4 Min Read
Citrix NetScaler Vulnerabilities Under Active Exploitation (CVE-2026-88771, CVE-2026-88772, & CVE-2026-88779)
Update October 4th 2026: Citrix has confirmed that this vulnerability is a Denial of Service (DoS) vulnerability. Update October 2nd 2026: Citrix released a security bulletin warning of another issue, this time in the SAML authentication subsystem. On September 26th, 2026, security researchers publicly warned of multiple unpatched remote code execution vulnerabilities affecting Citrix NetScaler ADC and NetScaler Gateway, as organizations began taking the appliances offline on the advice of national authorities. On September 27th, Citrix confirmed active exploitation of CVE-2026-88771 & CVE-2026-88772, which enable unauthenticated Remote Code Execution (RCE) and impact the default configuration of Citrix Netscaler appliances.
Sep 26, 2026 - 19 Min Read
Urgent Kiteworks Warning For Clients to Shutdown Platform Temporarily
On September 25th, 2026, Kiteworks notified customers that it has received credible threat intelligence from the U.S federal government, specifically the intelligence community indicating an attack on Kiteworks systems may be imminent this weekend.
Sep 25, 2026 - 2 Min Read
Critical Authentication Bypass in WSO2 API Management Products Under Active Exploitation (CVE-2026-5430)
Unauthenticated attackers can forge a JSON Web Tokens that WSO2 API management accepts as valid, including administrators and the APIs they control.
Sep 24, 2026 - 3 Min Read
Critical Vulnerabilities in Drupal Contributed Modules (CVE-2026-96355, CVE-2026-96388, CVE-2026-96374, CVE-2026-96376, CVE-2026-96375)
Drupal released fixes on September 23rd for 36 vulnerabilities across 16 contributed modules, five critical that can lead to remote code execution.
Sep 23, 2026 - 5 Min Read
Critical Path Traversal Vulnerability in Check Point Management Servers Under Active Exploitation (CVE-2026-93616)
A critical pre-authentication path traversal flaw in Check Point Management Servers lets remote attackers upload and run arbitrary scripts on the system that administers enterprise firewall policy, and attackers have been exploiting it since July
Sep 22, 2026 - 5 Min Read
Critical Vulnerability in WordPress Disclosed (CVE-2026-87902)
A critical unauthenticated path traversal in WordPress Core lets a remote attacker force a site to include a local PHP file from outside its theme directories, which on common server configurations leads to remote code execution.
Sep 22, 2026 - 4 Min Read
Critical Vulnerability in F5 Big-IP APM Under Active Exploitation (CVE-2026-94127)
On September 22nd, 2026, F5 published an advisory for a critical vulnerability in BIG-IP Access Policy Manager (APM) and confirmed active exploitation in the wild. Tracked as CVE-2026-94127, the flaw lets an unauthenticated, remote attacker send crafted traffic to an affected virtual server and execute code on the appliance.
Sep 22, 2026 - 4 Min Read
Critical Vulnerability in Cisco ISE Under Active Exploitation (CVE-2026-76460)
On September 16th, 2026, Cisco disclosed a critical vulnerability in Identity Services Engine (ISE) and confirmed it is under active exploitation. Tracked as CVE-2026-76460, the flaw stems from insufficient authentication control on an API endpoint.
Sep 17, 2026 - 3 Min Read