CVEs that matter, exploitation status and patch guidance without the hype.
The secure file-sharing vendor has released updates addressing 126 vulnerabilities, including a maximum-severity remote code execution bug in its EPG component that requires no authentication.
A pre-authentication integer underflow in MikroTik RouterOS web management could let attackers execute code with root privileges or trigger denial of service with a single request, CISA warned.
Cisco has released fixes for a critical authentication bypass flaw in Catalyst SD-WAN Manager that attackers are actively exploiting to gain administrative access. The vulnerability marks the fifth SD-WAN zero-day weaponized this year.
Microsoft will roll out Content Security Policy protections across Entra ID to block external scripts during authentication, completing the deployment by late October 2026.
The remote access vendor has released version 15.82 to address multiple vulnerabilities, including a critical access control bypass that could enable remote code execution across Windows, Linux and macOS platforms.
Mandiant and GreyNoise document active exploitation of CVE-2026-88771 and CVE-2026-88772 in NetScaler appliances, with threat actors deploying custom malware families and gaining root access across government and financial sectors.
Researchers found that actual TLS configurations often diverge significantly from national security guidelines, prompting the development of TLSGatekeeper, a tool that enforces cryptographic standards at the network level without decrypting traffic.
OpenAI's research framework has uncovered a new class of prompt injection attacks that can propagate themselves through email, files, and code comments, instructing AI agents to reproduce the malicious payload across systems.
