https://blog.it-learn.io/tags/cve-2026-48842/Recent content in Cve-2026-48842 on it-learn.io | IT, Networking & Cybersecurity BlogHugoen-usFri, 25 Sep 2026 00:00:00 +0000https://blog.it-learn.io/posts/2026-09-25-roundcube-pre-auth-sqli-cve-2026-48842-exploited/Fri, 25 Sep 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/posts/2026-09-25-roundcube-pre-auth-sqli-cve-2026-48842-exploited/Pre-auth SQL injection in Roundcube Webmail is under active exploitation. A critical TACACS+ protocol vulnerability threatens network device authentication infrastructure. CISA adds WSO2 API Control Plane (CVSS 9.8) and Adobe Commerce flaws to KEV. Microsoft tracks Storm-2570 ransomware affiliate reusing consistent TTPs across four ransomware brands.