BeyondTrust warned customers on Thursday to fix a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. Remote Support is the company’s enterprise-wide support solution that helps IT service desks, help desks and customer support teams resolve issues remotely. Tracked as CVE-2026-102764actively exploited this Authentication bypass The … Read more
Citrix has released emergency updates for a new NetScaler denial of service vulnerability known as CVE-2026-88779, which has been exploited in zero-day attacks. Researchers are investigating whether it can also be exploited for remote code execution. The vulnerability is a memory buffer flaw that affects NetScaler ADC and NetScaler Gateway appliances that use SAML authentication … Read more
Fortinet is warning customers about a critical FortiMail vulnerability, CVE-2026-104286, which is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. The vulnerability is classified as critical with a CVSS score of 9.8 and affects the FortiMail administration interface. “A vulnerability related to improper restriction of a pathname to … Read more
Cisco on Wednesday deployed urgent patches for a critical authentication bypass in Catalyst SD-WAN Manager that has been exploited in the wild. The flaw, tracked as CVE-2026-76504 (CVSS score 9.8), impacts the session-based API authentication mechanism and could allow remote, unauthenticated attackers to gain administrative access to a vulnerable system. “In September 2026, the Cisco … Read more
Cisco has released security updates to address a critical zero-day in Catalyst SD-WAN Manager (tracked as). CVE-2026-76504), which attackers actively exploit to gain administrator rights. Catalyst SD-WAN Manager, formerly known as SD-WAN vManage, is network management software that allows administrators to monitor and manage up to 6,000 SD-WAN devices from a single dashboard. “In September … Read more
Apple released iOS and macOS updates on Monday to patch a zero-day vulnerability that may have been exploited for targeted attacks. The bug, tracked as CVE-2026-86950, is an out-of-bounds write issue in the CoreGraphics component that can be exploited to execute arbitrary code when processing a specially crafted file. Apple hasn’t said how the malicious … Read more
Secure file-sharing software company Kiteworks is asking customers worldwide to temporarily shut down their servers for a period of six hours on Saturday after receiving a threat alert of a possible impending cyberattack. According to German technology publication HeiseKiteworks CISO Frank Balonis warned customers via email that the company had received “credible threat intelligence from … Read more
Arista Networks has released security patches for a zero-day vulnerability that is being actively exploited and impacts on-prem deployments of VeloCloud Orchestrator (VCO). VCO is a cloud-based centralized management platform that helps administrators configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated edge devices. Tracked as CVE-2026-93952This maximum severity error is due … Read more
Check Point on Tuesday announced urgent patches for a critical-severity vulnerability in the Management Server that was exploited in the wild as a zero-day vulnerability. The vulnerability, tracked as CVE-2026-93616 (CVSS score 9.8), is described as a directory traversal and file upload issue that could allow unauthenticated attackers to upload and execute arbitrary scripts on … Read more
D-Link warned customers about a maximum severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch affecting older DIR-822A dual-band Wi-Fi routers. This vulnerability is due to a stack-based buffer overflow and improper data processing in the DHCP server component and can be exploited without authentication or user interaction. Attackers without valid credentials … Read more