Threat Summary CVE-2026-76461 is a pre-authentication SQL injection vulnerability in the email parsing logic of Cisco Secure Email Gateway (AsyncOS). This vulnerability enables unauthenticated remote

Threat Summary Patches have now been released addressing two critical vulnerabilities: CVE-2026-85102, which affects Security Gateway and Spark Firewall, and CVE-2026-85103, which affects Security Gateway,

Threat Summary A critical security weakness (CVE-2026-84869) has been identified in the ConnectWise ScreenConnect client (prior to version 26.6.5), where missing authorization controls and improper

Threat Summary A maximum-severity (CVSS 10.0) vulnerability CVE-2026-86218 has been discovered in N-able N-central prior to build 2026.3.1.14. This flaw allows unauthenticated attackers to execute

Summary This bulletin covers Microsoft’s Sept 8, 2026 Patch Tuesday release, and prioritizes the two actively exploited zero-day vulnerabilities: CVE-2026-85880 in Windows Advanced Local Procedure

Summary This Security Bulletin details two chained vulnerabilities, an authentication bypass (CVE-2026-81578, CVSS 8.8 HIGH) and an unsafe dynamic class-loading flaw (CVE-2026-82078, CVSS 9.4 CRITICAL),

Threat Summary On August 26, 2026, Ubiquiti officially disclosed three maximum-severity vulnerabilities affecting core UniFi infrastructure: CVE-2026-77537 (UniFi Protect), CVE-2026-77550 (UniFi OS devices), and CVE-2026-77554

Threat Summary PaperCut Software has issued an urgent security bulletin confirming active, zero-day exploitation of a high-severity vulnerability impacting PaperCut NG and PaperCut MF application

Threat Summary On August 6, 2026, Apple released a security patch addressing CVE-2026-65400. This vulnerability is a pre-authentication authentication bypass in the macOS Screen Sharing

Threat Summary  CVE-2026-58231 is a critical threat affecting SAP Commerce Cloud’s Data Hub Adapter (COM_CLOUD 2211 and 2211-JDK21). The flaw stems from missing authorization checks

Threat Summary On August 14, 2026, WatchTowr released a full technical writeup on CVE-2026-8452. The vulnerability is a heap-based memory overflow flaw affecting Citrix NetScaler

Threat Summary A critical zero-day vulnerability (CVE-2026-50656/“RoguePlanet”) in Microsoft Defender’s Malware Protection Engine (mpengine.dll) enables local users, including standard, low-privilege accounts, to escalate privileges to

Threat Summary On August 11, 2026, Rapid7 released a Proof-of-Concept (PoC) for CVE-2026-55040, a critical authentication bypass affecting Microsoft SharePoint Server Subscription Edition, SharePoint Enterprise

Summary On July 30th, 2026, SolarWinds released fixes for a critical Authentication-Bypass vulnerability in Web Help Desk (WHD) tracked as CVE-2026-28323, and a related high-severity

Threat Summary Threat actors are actively exploiting two high-severity authentication bypass vulnerabilities, CVE-2026-18556 and CVE-2026-18577, in N-able N-Central, a widely deployed remote monitoring and management

Threat Summary CVE-2026-20316 is a newly discovered zero-day vulnerability affecting Cisco Secure Firewall Management Center (FMC) software, allowing unauthenticated, remote attackers to log in using

Threat Summary Cybersecurity and Infrastructure Security Agency (CISA) has added several critical zero-day vulnerabilities targeting Microsoft SharePoint Server. CVE-2026-58644 is a deserialization flaw in SharePoint

Threat Summary CVE-2026-6875 is a critical remote code execution (RCE) vulnerability in the ServiceNow AI Platform. The flaw allows unauthenticated attackers to escape the sandbox

Threat Summary On April 14, 2026, Fortinet released fixes for a critical OS command injection vulnerability in FortiSandbox, tracked as CVE-2026-39808. The flaw allows remote

Threat Summary Arctic Wolf has observed a ClickFix-style intrusion pattern in which a user-executed PowerShell command downloads and runs remote content directly in memory. In

Threat Summary Two severe vulnerabilities affecting SonicWall Secure Mobile Access 1000 (SMA1000) series appliances have been confirmed as under active exploitation since their public disclosure

Threat Summary On July 6, 2026, Apache disclosed CVE-2026-43867. Fixed releases (4.21.0 on July 1 and 4.18.3 on July 3) were available prior to public

Overview Arctic Wolf Internal Security Operations (SecOps) recently identified a GitHub page impersonating Arctic Wolf to target our customers and prospects. The SecOps team immediately

Summary CVE-2026-48558 is a critical authentication bypass vulnerability in SimpleHelp Remote Monitoring and Management (RMM) software, caused by improper validation of OpenID Connect (OIDC) token

Threat Summary A suite of severe vulnerabilities has been disclosed in libssh2 (an SSH client library widely embedded in software such as curl, Git GUI

Summary In mid-June 2026, security researchers identified an active, large-scale credential compromise campaign affecting Fortinet FortiGate firewalls, dubbed FortiBleed. Threat actors have been systematically extracting

Threat Summary CVE-2026-25089 is a critical OS command injection (CWE-78) vulnerability discovered in Fortinet FortiSandbox versions 4.4.0–4.4.8, 5.0.0–5.0.5, and corresponding Cloud and Platform as a

Threat Summary On June 9, 2026, Microsoft released its regular Patch Tuesday security update, fixing 206 vulnerabilities (with 39 rated Critical) affecting a broad spectrum

Summary A critical unauthenticated remote code execution vulnerability in Oracle PeopleSoft PeopleTools, tracked as CVE-2026-35273, is under active exploitation by the ShinyHunters extortion group in

On June 9–10, 2026, Ivanti disclosed and patched two maximum-severity vulnerabilities in the Sentry appliance (formerly MobileIron Sentry): CVE-2026-10520 (OS command injection, CVSS 10.0) and