Daily Brief

Tuesday’s brief: Exchange inboxes, then Rejetto HFS, Dell’s update tool, Denmark’s registry

Tuesday’s brief: Exchange inboxes, then Rejetto HFS, Dell’s update tool, Denmark’s registry

Any logged-in user can read other mailboxes on on-prem Exchange until Friday’s update is in. Also: Rejetto HFS probing, Dell…
If the help desk is still on Zammad 6.5, today is the due date

If the help desk is still on Zammad 6.5, today is the due date

A session bug on older Zammad can run code as the app user. CISA’s federal due date is October 5.…
Dell storage modules can hand over array admin with no login

Dell storage modules can hand over array admin with no login

Missing authentication in Dell Container Storage Modules can return storage admin credentials. Upgrade to 1.18.0 and rotate secrets. There is…
Self-hosted GitLab AI gateways can run commands from a flow

Self-hosted GitLab AI gateways can run commands from a flow

A logged-in Duo user can break out of a custom flow on a self-hosted AI Gateway. Update the gateway image.…
Monday’s brief: NetScaler again, then Zammad, Dell storage, GitLab’s AI gateway

Monday’s brief: NetScaler again, then Zammad, Dell storage, GitLab’s AI gateway

Last week’s NetScaler build does not close Sunday’s SAML bug. Also: Zammad due today, Dell CSM 1.18.0, and a self-hosted…
NetScaler SAML Flaw CVE-2026-88779: Fixed Builds and What to Hunt

NetScaler SAML Flaw CVE-2026-88779: Fixed Builds and What to Hunt

Citrix CVE-2026-88779 crashes SAML-configured NetScaler gateways and is in CISA KEV. Fixed builds, what to hunt, and the newer Oct 8 fix (CVE-2026-107406).
Your FortiMail management plane has a Saturday deadline

Your FortiMail management plane has a Saturday deadline

Fortinet confirmed active exploitation of an unauthenticated management-interface file-write bug. CISA's federal due date is Saturday, October 4. Workaround, hunt,…
Fortra just told BoKS owners to patch the autoregistration service

Fortra just told BoKS owners to patch the autoregistration service

A critical remote stack overflow in boks_autoregisterd. Move to 8.1.0.24 or 9.0.0.7 and lock down port 6507....
If you still sandbox with vm2 on Node 24, bump to 3.11.7 today

If you still sandbox with vm2 on Node 24, bump to 3.11.7 today

A critical sandbox escape via a double-prefixed node:test import has a public PoC. Upgrade vm2 and plan stronger isolation....
Low-priv template editors can root your Satellite host

Low-priv template editors can root your Satellite host

Foreman safemode bypass lets authenticated low-privilege users run commands on the host. Apply RHSA-2026:74503 and shrink template roles....
Friday’s brief: FortiMail due Saturday, then BoKS, vm2, Satellite

Friday’s brief: FortiMail due Saturday, then BoKS, vm2, Satellite

FortiMail is under active exploitation with a federal clock ending Saturday. Also: Fortra BoKS overflow, a vm2 sandbox escape, and…
Your SD-WAN Manager has a Saturday deadline — and attackers already have admin

Your SD-WAN Manager has a Saturday deadline — and attackers already have admin

Cisco Catalyst SD-WAN Manager auth bypass is in the wild. CISA's federal due date is Saturday, October 3. Patch, then…
TeamViewer just told every desktop owner to update before the weekend

TeamViewer just told every desktop owner to update before the weekend

Five high-severity client and host flaws, including a session access-control bypass that can lead to remote code execution. Move to…