NetScaler SAML Flaw CVE-2026-88779 Requires Another Update
Citrix confirms attacks exploiting NetScaler SAML flaw CVE-2026-88779. Customers who installed September patches must upgrade again to prevent service outages.
Read more →Vulnerabilities
Latest articles in Vulnerabilities
GitLab Patches Critical AI Gateway Command Execution Flaw
GitLab fixes CVE-2026-90970, a critical AI Gateway flaw enabling command execution. Self-hosted users must patch; GitLab-hosted gateways are already protected.
Read more →
FortiMail CVE-2026-104286 Exploited as Fixes Remain Pending
Fortinet says attackers are exploiting critical FortiMail flaw CVE-2026-104286. Affected organizations should restrict management access and review indicators.
Read more →
Cisco SD-WAN Zero-Day CVE-2026-76504 Exploited in Attacks
Cisco says attackers are exploiting CVE-2026-76504 to gain admin API access to SD-WAN Manager. Fixed releases are available; exposed systems need review.
Read more →
Exploited Citrix NetScaler Zero-Days Prompt Emergency Patches
Citrix patched two actively exploited NetScaler remote code execution flaws. CISA reports attacks worldwide and urges checks for compromise before updates.
Read more →
ShinyHunters Bypass WAF Defenses in Oracle PeopleSoft Attacks
ShinyHunters are bypassing WAF rules to exploit unpatched Oracle PeopleSoft servers. Mandiant found web shells on dozens of systems across multiple sectors.
Read more →
CISA Flags Exploited SharePoint, WSO2 and Adobe Commerce Flaws
CISA lists exploited flaws in SharePoint, RouterOS, WSO2 and Adobe Commerce, with federal remediation deadlines on September 27 and 28 for affected agencies.
Read more →
WordPress Core Flaw CVE-2026-87902 Now Used in Attacks
Patchstack reports attackers are using WordPress flaw CVE-2026-87902 to write PHP files. WordPress issued fixes; administrators should update and review logs.
Read more →
Actively Exploited VeloCloud Orchestrator Flaw Scores 10.0
Arista warns that attackers are exploiting a CVSS 10.0 VeloCloud Orchestrator flaw; on-premises deployments using Edge certificates need rapid review and fixes.
Read more →
CISA Warns Three Linux Kernel Flaws Are Actively Exploited
CISA confirms three Linux kernel flaws are under active exploitation, requiring urgent patching and forensic checks across affected US federal systems.
Read more →