Hackers are exploiting an operating system command entry vulnerability in SiteGuard Server Edition’s web application firewall (WAF), which allows them to execute commands with ROOT or SYSTEM privileges on affected computers. The security issue is tracked as CVE-2026-106931 and affects the statistics feature in host-based WAF instances, which is enabled by default. SiteGuard is a … Read more
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app (richdocumentscode) for Nextcloud. Multiple administrator reports indicate that the attacks began in mid-September, about a month before the official event Security bulletinThe GitHub AdviceAnd CVE publication. CVE-2026-110447 affects Richdocumentscode versions before 26.4.303 and … Read more
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited to attack firewalls. The vulnerability affects the PAN-OS management interface and allows authenticated attackers with network access to execute code as root on vulnerable devices. Palo Alto Networks confirmed in a safety notice announced on … Read more
According to WordPress security company Patchstack, a critical vulnerability is being exploited in the Bricksforge WordPress plugin. The vulnerability is tracked as CVE-2026-85097 and has a CVSS score of 9.8. Unauthenticated attackers can exploit it to upload arbitrary files and execute malicious code. This allows threat actors to gain full control over the targeted WordPress … Read more
Threat actors are exploiting a critical vulnerability in the Rejetto HTTP File Server (HFS) to bypass authentication and gain remote code execution (RCE), VulnCheck warns. The flaw is tracked as CVE-2026-61500 (CVSS score of 9.3) and exists because the open source file server passes output from its non-cryptographic session cookie generator to unauthenticated clients during … Read more
Fortinet is warning customers about a critical FortiMail vulnerability, CVE-2026-104286, which is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. The vulnerability is classified as critical with a CVSS score of 9.8 and affects the FortiMail administration interface. “A vulnerability related to improper restriction of a pathname to … Read more
Cisco on Wednesday deployed urgent patches for a critical authentication bypass in Catalyst SD-WAN Manager that has been exploited in the wild. The flaw, tracked as CVE-2026-76504 (CVSS score 9.8), impacts the session-based API authentication mechanism and could allow remote, unauthenticated attackers to gain administrative access to a vulnerable system. “In September 2026, the Cisco … Read more
According to a new report from Google Threat Intelligence Group (GTIG), the number of vulnerabilities disclosed each month doubled in 2026, and the monthly average of vulnerabilities exploited in the wild nearly doubled. Analyzing disclosures from January 2025 to August 2026, GTIG found that monthly disclosures increased from 5,045 in January 2026 to 10,477 in … Read more
Threat actors have exploited a high-level security flaw in Roundcube, the popular open source webmail client, the Canadian Center for Cyber ​​Security warns. The security flaw is tracked as CVE-2026-48842 (CVSS score of 8.1) and is described as an SQL injection virtuser_query Plugin that can be exploited without authentication. The plugin resolves email addresses into … Read more