Citrix CVE-2026-88779 crashes SAML-configured NetScaler gateways and is in CISA KEV. Fixed builds, what to hunt, and the newer Oct 8 fix (CVE-2026-107406).
A session bug on older Zammad can run code as the app user. CISA’s federal due date is October 5.…
Missing authentication in Dell Container Storage Modules can return storage admin credentials. Upgrade to 1.18.0 and rotate secrets. There is…
A logged-in Duo user can break out of a custom flow on a self-hosted AI Gateway. Update the gateway image.…
Last week’s NetScaler build does not close Sunday’s SAML bug. Also: Zammad due today, Dell CSM 1.18.0, and a self-hosted…
CISOs are drowning in scanner findings while attackers weaponize new flaws within a day. Compare eight AI exposure management tools that focus on reachable risk.
Fortinet confirmed active exploitation of an unauthenticated management-interface file-write bug. CISA's federal due date is Saturday, October 4. Workaround, hunt,…
A critical remote stack overflow in boks_autoregisterd. Move to 8.1.0.24 or 9.0.0.7 and lock down port 6507....
A critical sandbox escape via a double-prefixed node:test import has a public PoC. Upgrade vm2 and plan stronger isolation....
Foreman safemode bypass lets authenticated low-privilege users run commands on the host. Apply RHSA-2026:74503 and shrink template roles....
FortiMail is under active exploitation with a federal clock ending Saturday. Also: Fortra BoKS overflow, a vm2 sandbox escape, and…
Five high-severity client and host flaws, including a session access-control bypass that can lead to remote code execution. Move to…
A high-severity handshake resend bug can leak heap memory or crash the process. Public fixes are out; OpenSSL 3.0 needs…
