CISA added the GS1900 CGI stack overflow to KEV yesterday. Federal due September 24 — patch, lock management VLANs, triage....
Two CVSS 9.8 unauth deserialization bugs on the ITSM brain. On-prem needs September updates or 2026.2+....
Four more local-root bugs disclosed September 18 — different from Monday’s KEV trio. Confirm your kernel covers all four....
Link-following Update Stack EoP to SYSTEM — federal due today. Verify September cumulatives actually landed....
Zyxel GS1900 KEV due Thursday, Ivanti Neurons unauth RCE, Linux LPE quartet, Windows Update Stack due today....
TanStack credential theft plus retained ex-employee GitHub access cloned ~170 private repos....
Monday reboot-and-revoke brief: Linux kernel KEV trio due today, Orkes Conductor RCE, SolarWinds ARM, CrowdSec offboarding....
CISA's three exploited Linux kernel bugs are due today. Patch, reboot, then triage....
Pre-auth INLINE scripts escape GraalVM. Fortinet is blocking thousands of attempts — upgrade to 3.30.2+....
Hard-coded static key yields unauthenticated RCE on ARM ≤2026.2. Ship 2026.2.1....
Friday clock stories: Cisco ISE root bypass due Saturday, Acronis hosting LPE, MikroTik MikroTrick, Check Point management root....
Pre-auth login overflow yields root on Security Management / Log servers. Apply LivePatch sk1000155; lock Trusted Clients....
CERT.pl MikroTrick chain: SSH auth bypass + privilege escalation. Two CVEs already on CISA KEV....
