Microsoft Patches Exploited Windows Shell Zero-Day Flaw
Microsoft patches CVE-2026-96951, an exploited Windows Shell flaw that bypasses Mark of the Web protections when users open malicious files sent by attackers.
Read more →Latest articles in Vulnerabilities
Microsoft patches CVE-2026-96951, an exploited Windows Shell flaw that bypasses Mark of the Web protections when users open malicious files sent by attackers.
Read more →
Researchers detect attempts to exploit SonicWall SMA1000 flaw CVE-2026-102255. Hotfixes are available, while successful compromise has not yet been confirmed.
Read more →
Atlassian urges patches for CVE-2026-21589 across eight self-hosted products, including Jira and Confluence, to prevent unauthenticated access to known files.
Read more →
Citrix confirms attacks exploiting NetScaler SAML flaw CVE-2026-88779. Customers who installed September patches must upgrade again to prevent service outages.
Read more →
GitLab fixes CVE-2026-90970, a critical AI Gateway flaw enabling command execution. Self-hosted users must patch; GitLab-hosted gateways are already protected.
Read more →
Fortinet says attackers are exploiting critical FortiMail flaw CVE-2026-104286. Affected organizations should restrict management access and review indicators.
Read more →
Cisco says attackers are exploiting CVE-2026-76504 to gain admin API access to SD-WAN Manager. Fixed releases are available; exposed systems need review.
Read more →
Citrix patched two actively exploited NetScaler remote code execution flaws. CISA reports attacks worldwide and urges checks for compromise before updates.
Read more →
ShinyHunters are bypassing WAF rules to exploit unpatched Oracle PeopleSoft servers. Mandiant found web shells on dozens of systems across multiple sectors.
Read more →
CISA lists exploited flaws in SharePoint, RouterOS, WSO2 and Adobe Commerce, with federal remediation deadlines on September 27 and 28 for affected agencies.
Read more →