FortiMail Zero-Day CVE-2026-104286 Exploited
CVE-2026-104286 FortiMail zero-day actively exploited, CISA KEV-listed. Plus GlobalProtect CVE-2026-0250 and Pentagon HR breach of 3M records.
Posts tagged: Cisa-Kev
Cisco SD-WAN Zero-Day CVE-2026-76504 Exploited
CVE-2026-76504 Cisco SD-WAN Manager pre-auth RCE actively exploited. Pentagon confirms 3M-record DMDC breach. UAT-11587 Antino backdoor hits Asian govs.
NetScaler Zero-Days CVE-2026-88771 and 88772 Exploited
Two Citrix NetScaler RCE zero-days exploited in default configs. Plus ShinyHunters hits PeopleSoft, SharePoint joins KEV, and JADEPUFFER destroys Azure res.
Roundcube Pre-Auth SQLi CVE-2026-48842 Exploited
CVE-2026-48842 Roundcube pre-auth SQLi confirmed exploited; TACACS+ protocol flaw threatens AAA; CISA adds WSO2 CVE-2026-5430 CVSS 9.8 to KEV.
Cisco Email Gateway Zero-Day CVE-2026-76461 - Root RCE
CVE-2026-76461 Cisco email gateway root RCE exploited now. ScreenConnect added to KEV. China APT chains Chrome and Windows zero-days for NGO targeting.
GitLab CVSS 10.0 Exploited - CVE-2026-85706 KEV
CVE-2026-85706 GitLab path traversal CVSS 10.0 added to CISA KEV. ConnectWise ScreenConnect worm-like RCE hits MSPs. JFrog Artifactory supply chain attack.
Microsoft 974-CVE Patch Tuesday - Two Exploited Zero-Days
Microsoft ships record 974 CVE fixes with two exploited zero-days CVE-2026-81963 and CVE-2026-85880. SAP OVERPASS CVSS 10 RCE and N-central KEV deadline Fr.
Rails RCE KindaRails2Shell Exploited - Fire Ant Hits IOS XR
KindaRails2Shell Rails RCE actively exploited via file read chain. Fire Ant targets Cisco IOS XR and TACACS. Claude sessions hijacked by infostealers.
ServiceNow CVSS 10 Trio - RCE and SQLi in the Wild
Three CVSS 10.0 ServiceNow AI Platform flaws patched; ZBT routers ship with factory backdoors CVE-2026-74232; PaperCut zero-day exploited in the wild.
270+ Zimbra Servers Compromised - CVE-2026-73570
CVE-2026-73570 compromises 270+ Zimbra servers with CISA 72-hour deadline. Plus CVE-2026-21962 Oracle WebLogic CVSS 10.0 and Iranian OT attacks.