BeyondTrust warned customers on Thursday to fix a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. Remote Support is the company’s enterprise-wide support solution that helps IT service desks, help desks and customer support teams resolve issues remotely. Tracked as CVE-2026-102764actively exploited this Authentication bypass The … Read more
XRP Ledger developers have defended an emergency security patch used to fix a bug capable of creating XRP outside the network’s fixed supply, saying they could not wait for the network’s usual two-week validation vote without disclosing the flaw to attackers. The fix, released on September 25, came three days after a bug bounty was … Read more
Citrix has released emergency updates for a new NetScaler denial of service vulnerability known as CVE-2026-88779, which has been exploited in zero-day attacks. Researchers are investigating whether it can also be exploited for remote code execution. The vulnerability is a memory buffer flaw that affects NetScaler ADC and NetScaler Gateway appliances that use SAML authentication … Read more
Arista Networks has released security patches for a zero-day vulnerability that is being actively exploited and impacts on-prem deployments of VeloCloud Orchestrator (VCO). VCO is a cloud-based centralized management platform that helps administrators configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated edge devices. Tracked as CVE-2026-93952This maximum severity error is due … Read more
Check Point on Tuesday announced urgent patches for a critical-severity vulnerability in the Management Server that was exploited in the wild as a zero-day vulnerability. The vulnerability, tracked as CVE-2026-93616 (CVSS score 9.8), is described as a directory traversal and file upload issue that could allow unauthenticated attackers to upload and execute arbitrary scripts on … Read more