Exploited

8 posts tagged with “Exploited”

BREAKING: NetScaler SAML memory overflow hits CISA KEV
cvenetscalercitrix

BREAKING: NetScaler SAML memory overflow hits CISA KEV

How to fix CVE-2026-88779: upgrade NetScaler ADC/Gateway to 14.1-73.41 or 13.1-64.28 (SAML SP/IdP builds)

Oct 4, 2026
Read
Zammad session fixation to root hits CISA KEV
cvezammadhelpdesk

Zammad session fixation to root hits CISA KEV

CVE-2026-102489 is not practically exploitable on Zammad 7.x. For CVE-2026-102490, upgrade self-hosted DEB/RPM packages to 7.2.2 or later.

Oct 2, 2026
Read
FortiMail unauthenticated path traversal hits CISA KEV
cvefortinetfortimail

FortiMail unauthenticated path traversal hits CISA KEV

How to fix CVE-2026-104286: disable FortiMail IBE (config system encryption ibe / set status disable) or upgrade to 8.0.2 / 7.6.7 / 7.4.9 or later

Oct 1, 2026
Read
Cisco SD-WAN Manager admin API bypass hits CISA KEV
cveciscosd-wan

Cisco SD-WAN Manager admin API bypass hits CISA KEV

How to fix CVE-2026-76504: upgrade Cisco Catalyst SD-WAN Manager to 20.9.10.1 / 20.12.8.2 / 20.15.6.1 / 20.18.4.1 / 26.1.2.1 / 26.2.1

Sep 30, 2026
Read
BREAKING: Cisco SD-WAN Manager admin API open without a login (CVE-2026-76504)
cveciscosd-wan

BREAKING: Cisco SD-WAN Manager admin API open without a login (CVE-2026-76504)

How to fix CVE-2026-76504: upgrade Cisco Catalyst SD-WAN Manager to 20.9.10.1 / 20.12.8.2 / 20.15.6.1 / 20.18.4.1 / 26.1.2.1 / 26.2.1

Sep 30, 2026
Read
Apple CoreGraphics file OOB write hits CISA KEV
cveappleios

Apple CoreGraphics file OOB write hits CISA KEV

How to fix CVE-2026-86950: update to iOS/iPadOS 26.7.1, macOS Sequoia 15.8.1, or macOS Tahoe 26.7.1

Sep 29, 2026
Read
BREAKING: Unauthenticated NetScaler RCE hits every appliance (CVE-2026-88771)
cvenetscalercitrix

BREAKING: Unauthenticated NetScaler RCE hits every appliance (CVE-2026-88771)

How to fix CVE-2026-88771: upgrade NetScaler ADC/Gateway to 14.1-73.37 or 13.1-64.23

Sep 27, 2026
Read
BREAKING: CVE-2026-85046 is a Chrome V8 bug Google says is exploited in the wild
cvechromev8

BREAKING: CVE-2026-85046 is a Chrome V8 bug Google says is exploited in the wild

How to fix CVE-2026-85046: upgrade Chrome to 152.0.7977.82 (Linux) or 152.0.7977.82/.83 (Windows and Mac)

Sep 3, 2026
Read