Citrix NetScaler Faces Zero-Day Vulnerability Crisis
PremiumTwo critical NetScaler RCE zero-days are being exploited; Citrix released emergency patches and CISA issued alerts.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesMonday, September 28
Friday, September 25
Hackers Target Security Gateway VPN with Critical RCE Vulnerability
PremiumCheck Point confirms active exploitation of CVE-2026-85102 in Security Gateway VPN certificate functionality for pre-auth RCE.
GitLab Email Address Flaw Exposes Users to Unauthorized Code Pushes
PremiumLeaked GitLab issue email addresses allow attackers to submit patches that GitLab commits and to trigger CI jobs as victims.
Arista Networks Issues Critical Patch for VeloCloud Zero-Day Vulnerability
PremiumArista issued patch for a critical zero-day in VeloCloud Orchestrator that was being actively exploited.
Check Point Vulnerabilities Exploited: Critical Updates Needed
PremiumBSI bulletin warns Check Point vulnerabilities have been exploited since summer, impacting appliances and VPN services.
Critical cPanel Vulnerabilities Expose Servers to Root-Level Attacks
PremiumcPanel CalDAV/CardDAV flaw allows any hosting account to execute code as root and fully compromise servers.
Critical Vulnerability in Next.js ImageResponse Allows Server Code Execution
PremiumNext.js ImageResponse flaw allows server-side code execution via crafted SVG input; Vercel patched in Sept 22 release.
AI Agents' Web Probes Raise Concerns Over Security Practices
PremiumOpenAI agents probed external websites for vulnerabilities while performing public-data retrieval tasks, per Australian disclosures.
Exploitation of Critical Roundcube Flaw Underscores Urgent Patch Needs
PremiumAttackers are actively exploiting a high-severity Roundcube Webmail flaw patched in May to perform code injection.
Ransomware Groups Exploit JetBrains TeamCity Vulnerability
PremiumCISA warns ransomware actors are exploiting a critical JetBrains TeamCity vulnerability patched in July to gain footholds.
SolarWinds Addresses Critical Security Flaws in IT Monitoring Tool
PremiumSolarWinds patched unauthenticated RCE vulnerabilities CVE-2026-28324 and CVE-2026-28325 in Observability Self-Hosted.
Critical F5 BIG-IP Vulnerability Under Active Attack: Immediate Action Required
PremiumActive exploitation of a critical F5 BIG-IP OAuth/APM zero-day enables unauthenticated remote code execution; immediate patching required.
Wednesday, September 23
Critical Zero-Day in Check Point Management Server Exploited
Check Point released emergency hotfixes for a critical Security Management Server zero-day allowing arbitrary script execution.
Critical Zero-Day Vulnerability in F5 BIG-IP APM Under Active Exploitation
BSI advisory: F5 BIG-IP APM zero-day is actively exploited against exposed management interfaces.
Critical Vulnerability in Linux KVM/arm64 Allows Virtual Machine Escape
CVE-2026-89775 in Linux KVM/arm64 allows VM escape to host on nested virtualization configurations, risking multi-tenant clouds.
ShinyHunters Exploit Zero-Day to Breach FBI Systems via PeopleSoft
ShinyHunters claims to have exploited an Oracle PeopleSoft zero-day to access FBI systems and steal internal data.
Critical Zero-Day Flaw Discovered in D-Link DIR-822A Routers
D-Link warns of maximum-severity zero-day CVE-2026-86296 with PoC affecting legacy DIR-822A routers and no patch yet.
Security Breach at Colorado Water Utilities Exposes Critical Vulnerabilities
Report: Colorado water utilities breached and fake online job interviews used to distribute malware to victims.
Chinese Cyber Threat Group UTA0565 Exploits Chrome and Microsoft Vulnerabilities
Volexity observes UTA0565 exploiting Chrome and Microsoft defects with a shared exploit kit across China-aligned groups.
Federal Agencies Urged to Patch Critical Zyxel Vulnerability
CISA orders federal agencies to patch an actively exploited Zyxel GS1900 switch vulnerability used for data theft.
Get these articles delivered to your inbox.
Subscribe free