Unauth data-plane RCE when a VIP has both APM and an OAuth profile. Hotfixes and interim iRule out; federal due…
Actively exploited CVSS 10 on on-prem VCO. Hosted patched; on-prem needs fixed builds and an IoC hunt....
In-the-wild V8 write; Chrome 153.0.8010.36/.37 fixes it. Federal KEV due is today — verify Edge and other Chromium browsers too....
Check Point VPN+mgmt KEV due Friday, F5 APM OAuth RCE, Arista VeloCloud CVSS 10, Chromium V8 due today....
CISA added the GS1900 CGI stack overflow to KEV yesterday. Federal due September 24 — patch, lock management VLANs, triage....
Two CVSS 9.8 unauth deserialization bugs on the ITSM brain. On-prem needs September updates or 2026.2+....
Four more local-root bugs disclosed September 18 — different from Monday’s KEV trio. Confirm your kernel covers all four....
Link-following Update Stack EoP to SYSTEM — federal due today. Verify September cumulatives actually landed....
Zyxel GS1900 KEV due Thursday, Ivanti Neurons unauth RCE, Linux LPE quartet, Windows Update Stack due today....
Hard-coded static key yields unauthenticated RCE on ARM ≤2026.2. Ship 2026.2.1....
TanStack credential theft plus retained ex-employee GitHub access cloned ~170 private repos....
Monday reboot-and-revoke brief: Linux kernel KEV trio due today, Orkes Conductor RCE, SolarWinds ARM, CrowdSec offboarding....
CISA's three exploited Linux kernel bugs are due today. Patch, reboot, then triage....
