Security Highlights Of The Week [10/26-2]
Fortinet FortiMail Zero-Day Actively Exploited With No Patch Available CISA and Fortinet warned that attackers are exploiting CVE-2026-104286, a critical FortiMail vulnerability with a CVSS score of 9.8. Crafted HTTP or HTTPS requests can allow attackers to write arbitrary files to the underlying system and potentially achieve code or...
Security Highlights Of The Week [10/26-1]
Two Citrix NetScaler Zero-Days Actively Exploited in the Wild Attackers are actively exploiting CVE-2026-88771 and CVE-2026-88772 against Citrix NetScaler ADC and Gateway appliances. Mandiant observed exploitation affecting organizations in North America and Europe, with post-exploitation tooling including custom WHIPSHOT web shells and the SLAPSHOT tunneler used for internal reconnaissance...
Security Highlights Of The Week [09/26-4]
Critical WordPress Vulnerability Exploited Within Hours of Disclosure Attackers began exploiting CVE-2026-87902 only hours after details of the vulnerability became public. The path traversal flaw affects WordPress page-template resolution and, under specific server and theme conditions, can allow an unauthenticated attacker to achieve remote code execution. Source: SecurityWeek Critical...
Security Highlights Of The Week [09/26-3]
Cisco ISE Zero-Day Exploited to Bypass AuthenticationCisco released emergency fixes for CVE-2026-76460, a maximum-severity vulnerability in Identity Services Engine and ISE Passive Identity Connector that was exploited as a zero-day. The CVSS 10 flaw allows a remote attacker to bypass authentication through a vulnerable API endpoint and access affected...
Security Highlights Of The Week [09/26-2]
N-able N-central Maximum-Severity RCE Exploited in Ongoing AttacksAttackers are actively exploiting CVE-2026-86218, a maximum-severity remote code execution vulnerability in N-able N-central. The flaw can provide unauthenticated access to the RMM console, potentially allowing attackers to execute scripts, deploy tools, and initiate remote sessions across downstream endpoints managed by a...
Security Highlights Of The Week [08/26-3]
PaperCut Zero-Day Is Being Actively ExploitedPaperCut confirmed active exploitation of a vulnerability affecting PaperCut NG and MF, with attacks observed against customer environments before a full fix was available. Organizations with internet-exposed Application Servers were urged to immediately restrict web interface access to trusted IP addresses while remediation efforts...
Security Highlights Of The Week [09/26-1]
SonicWall Warns of Actively Exploited SMA1000 Zero-Day ChainThreat actors are chaining two previously unknown vulnerabilities in SonicWall SMA1000 appliances in remote code execution attacks. CVE-2026-83548 is a maximum-severity command injection issue stemming from SSRF, while CVE-2026-83549 enables command execution through the management console after administrative access is obtained.Source: BleepingComputer...
Security Highlights Of The Week [08/26-2]
Zimbra RCE Is Being Actively Exploited Against Internet-Facing ServersAttackers are actively exploiting CVE-2026-73570 in Zimbra Collaboration, an unauthenticated command injection vulnerability affecting deployments with the optional SNMP package and notifications enabled. Successful exploitation allows arbitrary operating system commands to run as the Zimbra user, creating a path to persistence,...
Security Highlights Of The Week [08/26-1]
GeoServer Zero-Day Exploited Hours After Public DisclosureAttackers began exploiting an unpatched GeoServer vulnerability only hours after technical details became public. The SQL injection issue can reportedly be escalated to remote code execution against vulnerable deployments using affected data stores.Source: SecurityWeek Cisco Secure Firewall Vulnerability Is Under Active ExploitationAttackers are...
Security Highlights Of The Week [07/26-3]
SonicWall SMA1000 Zero-Days Hit Remote Access InfrastructureSonicWall confirmed active exploitation of two SMA1000 vulnerabilities, CVE-2026-15409 and CVE-2026-15410. The chain combines unauthenticated SSRF with code execution paths that can ultimately give attackers root-level control over exposed remote access appliances, making it one of the week’s most urgent edge-device stories.Source: Help...
Security Highlights Of The Week [07/26-2]
Januscape Opens a New VM Escape Path on Both Intel and AMDResearchers disclosed Januscape, a Linux KVM vulnerability that allows guest-to-host escape on both Intel and AMD systems. Because it affects the shadow MMU path in KVM and was reportedly used as a zero-day in Google’s kvmCTF program, it...
Security Highlights Of The Week [07/26-1]
Cisco Confirms Active Exploitation of Unified CM FlawCisco confirmed that attackers are now exploiting CVE-2026-20230 in Unified Communications Manager. The bug is an unauthenticated SSRF issue that can be triggered remotely with crafted HTTP requests, putting core enterprise telephony infrastructure at risk.Source: BleepingComputer FortiBleed Credential Theft Now Linked to...
