The Consensus Security Vulnerability Alert

ISC provides a free analysis and warning service to thousands of Internet users and organizations, and is actively working with Internet Service Providers to fight back against the most malicious attackers. https://isc.sans.edu/about.html

Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950)

Published: 2026-09-28

Last Updated: 2026-09-28 22:35:35 UTC

by Johannes Ullrich (Version: 1)

Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS 26, macOS 26 and macOS 15 is already being exploited. iOS and macOS 27 are not affected. Today's update for the current "27" branch does not address security issues, but fixes some functional issues that got caught after the release two weeks ago. A 27.1 version was also expected to support the new foldable iPhone and will likely include specific features geared to the soon to be available device.

Apple credits Meta Product Security with reporting the vulnerability and states that: "Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27."

Read the full entry: https://isc.sans.edu/diary/Apple+Emergency+Patch+for+iOS+26+macOS26+macOS15+CVE202686950/33376/

A Closer Look at Malware From the Macfinger ClickFix Campaign

Published: 2026-09-25

Last Updated: 2026-09-25 12:45:19 UTC

by Brad Duncan (Version: 1)

Introduction

My previous post on Macfinger ClickFix was two days ago, and this campaign remains active. The more I look into the malware delivered by this campaign, the more I believe it is not a variant of Atomic macOS (AMOS) Stealer as originally reported. There are too many differences between what I've documented with recent AMOS Stealer activity and what I'm now seeing with this malware. The data collection and method of exfiltration is different between these two malware families. The persistence mechanism is different. Finally, AMOS Stealer uses an installer with a combined arm64/x86_64 architecture, but this malware uses either an arm64 or an x86_64 Mach-O binary depending on the architecture of the victim's host. There are too many differences with this malware.

The malware delivered by Macfinger ClickFix is indeed an information stealer. I just don't know what to call it.

In an attempt to find out, this diary examines an infection from the Macfinger ClickFix campaign on Thursday, 2026-09-24. This infection was on a physical host running macOS 27.0 (Golden Gate).

Read the full entry: https://isc.sans.edu/diary/A+Closer+Look+at+Malware+From+the+Macfinger+ClickFix+Campaign/33368/

One URL, Three Different Tricks

Published: 2026-09-24

Last Updated: 2026-09-24 06:25:06 UTC

by Xavier Mertens (Version: 1)

Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse basic security controls. Here is the defanged link...

Let's break it down...

The first trick is the old "userinfo" field. According to RFC 3986, everything between the scheme and an "@" inside the authority is treated as credentials ("user:password[@]host"). Browsers silently ignore it, but it has two advantages for the attacker. The random string ("YKZjqa7A") makes every URL unique, which defeats exact-match blocklists and URL reputation lookups. It probably also acts as a tracking token per victim or campaign. As a side effect, the whole thing now looks like an email address to any tool that doesn't parse URLs strictly ...

Read the full entry: https://isc.sans.edu/diary/One+URL+Three+Different+Tricks/33366/

Scans for Wordfence Protected Websites (2026.09.29)

https://isc.sans.edu/diary/Scans+for+Wordfence+Protected+Websites/33382/

Wireshark 4.6.9 Released (2026.09.27)

https://isc.sans.edu/diary/Wireshark+469+Released/33372/

The list is assembled by pulling recent vulnerabilities from NIST NVD, Microsoft, Twitter mentions of vulnerabilities, ISC Diaries and Podcast, and the CISA list of known exploited vulnerabilities. There are also some unscored, but significant, vulnerabilities at the end. This includes vulnerabilities that have not been added to the NVD yet.

CVE-2026-94127 - F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

Product: F5 BIG-IP Access Policy Manager

CVSS Score: 9.8

** KEV since 2026-09-22 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-94127

ISC Podcast: https://isc.sans.edu/podcastdetail/10106

NVD References: https://my.f5.com/manage/s/article/K000162605

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-94127

CVE-2026-93616 - Check Point Multiple Products Path Traversal Vulnerability

Product: Check Point Multiple Products

CVSS Score: 9.8

** KEV since 2026-09-22 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-93616

ISC Podcast: https://isc.sans.edu/podcastdetail/10106

NVD References: https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616

CVE-2026-85102 - Check Point Multiple Products Improper Certificate Validation Vulnerability

Product: Check Point Multiple Products

CVSS Score: 0

** KEV since 2026-09-22 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-85102

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102

CVE-2026-93952 - Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

Product: Arista VeloCloud Orchestrator

CVSS Score: 10.0

** KEV since 2026-09-22 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-93952

ISC Podcast: https://isc.sans.edu/podcastdetail/10106

NVD References: https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93952

CVE-2026-86950 - Apple Multiple Products Out-of-Bounds Write Vulnerability

Product: Multiple Apple Products

CVSS Score: 0

** KEV since 2026-09-29 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86950

ISC Podcast: https://isc.sans.edu/podcastdetail/10114

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950

CVE-2026-88771 - Citrix NetScaler Improper Input Validation Vulnerability

Product: Citrix NetScaler

CVSS Score: 0

** KEV since 2026-09-27 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-88771

ISC Podcast: https://isc.sans.edu/podcastdetail/10112

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88771

CVE-2026-88772 - Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Product: Citrix NetScaler

CVSS Score: 0

** KEV since 2026-09-27 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-88772

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772

CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Product: Microsoft Windows

CVSS Score: 7.8

** KEV since 2026-09-08 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-85880

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880

CVE-2026-87902 - WordPress Core Remote File Inclusion Vulnerability

Product: WordPress

CVSS Score: 8.1

** KEV since 2026-09-25 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-87902

NVD References: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-87902

CVE-2008-4128 - Cisco IOS Cross-Site Request Forgery Vulnerability

Product: Cisco IOS

CVSS Score: 0

** KEV since 2026-07-13 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-4128

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4128

CVE-2026-76460 - Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Product: Cisco Identity Services Engine

CVSS Score: 0

** KEV since 2026-09-16 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76460

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76460

CVE-2026-65660 - Microsoft SharePoint Code Injection Vulnerability

Product: Microsoft SharePoint

CVSS Score: 0

** KEV since 2026-09-25 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65660

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65660

CVE-2026-85706 - GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

Product: GitLab Community Edition and Enterprise Edition

CVSS Score: 0

** KEV since 2026-09-11 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-85706

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85706

CVE-2026-67279 - Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

Product: Mikrotik RouterOS

CVSS Score: 0

** KEV since 2026-09-25 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-67279

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-67279

CVE-2026-5430 - WSO2 Multiple Products Path Traversal Vulnerability

Product: WSO2

CVSS Score: 0

** KEV since 2026-09-24 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-5430

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-5430

CVE-2026-71362 - Adobe Commerce and Magento Incorrect Authorization Vulnerability

Product: Adobe Commerce and Magento

CVSS Score: 0

** KEV since 2026-09-24 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71362

KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-71362

CVE-2026-68839 - Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability

Product: Microsoft Windows

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-68839

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68839

CVE-2026-69276 - Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability

Product: Microsoft UxTheme Library

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69276

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69276

CVE-2026-69408 - Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Product: Microsoft Windows Media Foundation

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69408

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69408

CVE-2026-69431 - Telnet Client Remote Code Execution Vulnerability

Product: Microsoft Windows

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69431

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69431

CVE-2026-69463 - Windows NTFS Remote Code Execution Vulnerability

Product: Microsoft Windows_Server_2025

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69463

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69463

CVE-2026-69491 - Microsoft DirectMusic Remote Code Execution Vulnerability

Product: Microsoft DirectMusic

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69491

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69491

CVE-2026-69493 - Windows Event Logging Service Remote Code Execution Vulnerability

Product: Microsoft Windows Event Logging Service

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69493

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69493

CVE-2026-69496 - Windows Compressed Folder Remote Code Execution Vulnerability

Product: Microsoft Windows Compressed Folder

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69496

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69496

CVE-2026-69525 - Remote Desktop Services Remote Code Execution Vulnerability

Product: Microsoft Remote Desktop Service

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69525

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69525

CVE-2026-69579 - Windows Message Queuing Remote Code Execution Vulnerability

Product: Microsoft Windows Message Queuing

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69579

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69579

CVE-2026-69590 - Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Product: Microsoft Windows Routing and Remote Access Service (RRAS)

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69590

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69590

CVE-2026-69595, CVE-2026-78445 - Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerabilities

Product: Microsoft Windows Services for NFS ONCRPC XDR Driver

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69595

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78445

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69595

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78445

CVE-2026-69715 - Windows Direct Show Remote Code Execution Vulnerability

Product: Microsoft Windows Direct Show

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69715

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69715

CVE-2026-69730 - Windows DNS Server Remote Code Execution Vulnerability

Product: Microsoft Windows DNS Server

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69730

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69730

CVE-2026-69768 - Windows RNDIS Remote Code Execution Vulnerability

Product: Microsoft Windows RNDIS

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69768

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69768

CVE-2026-69769 - Windows HTTP Print Provider Remote Code Execution Vulnerability

Product: Microsoft Windows HTTP Print Provider

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69769

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69769

CVE-2026-69819 - RPC Runtime Library Remote Code Execution Vulnerability

Product: Microsoft Windows RPC Runtime Library

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69819

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69819

CVE-2026-69824 - Microsoft Standard XPS Remote Code Execution Vulnerability

Product: Microsoft Standard XPS

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69824

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69824

CVE-2026-69829 - Windows Shell Remote Code Execution Vulnerability

Product: Microsoft Windows Shell

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69829

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69829

CVE-2026-69845, CVE-2026-72979 - Windows DHCP Server Remote Code Execution Vulnerabilities

Product: Microsoft Windows DHCP Server

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69845

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72979

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69845

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72979

CVE-2026-69854 - Spring Cloud Azure Elevation of Privilege Vulnerability

Product: Microsoft Spring Cloud Azure

CVSS Score: 9.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69854

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69854

CVE-2026-70296 - Windows Imaging Component Remote Code Execution Vulnerability

Product: Microsoft Windows Imaging Component

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70296

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70296

CVE-2026-72982 - Windows Netlogon Remote Code Execution Vulnerability

Product: Microsoft Windows Netlogon

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72982

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72982

CVE-2026-72983 - Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Product: Microsoft Internet Connection Sharing (ICS)

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72983

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72983

CVE-2026-73009 - Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Product: Microsoft Windows Secure Socket Tunneling Protocol (SSTP)

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73009

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73009

CVE-2026-73025 - Windows iSCSI Security Feature Bypass Vulnerability

Product: Microsoft Windows iSCSI

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73025

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73025

CVE-2026-77493 - Windows Graphics Component Remote Code Execution Vulnerability

Product: Microsoft Windows Graphics Component

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77493

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77493

CVE-2026-102268 - PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

Product: PyJWT

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-102268

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102268

CVE-2026-69843 - Microsoft Fabric Elevation of Privilege Vulnerability

Product: Microsoft Fabric

CVSS Score: 10.0

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69843

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69843

CVE-2026-85878 - Azure Database for PostgreSQL Elevation of Privilege Vulnerability

Product: Microsoft Azure Database for PostgreSQL

CVSS Score: 9.9

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-85878

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85878

CVE-2026-85885 - Microsoft 365 Copilot Elevation of Privilege Vulnerability

Product: Microsoft 365 Copilot

CVSS Score: 9.9

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-85885

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85885

CVE-2026-69399, CVE-2026-70009 - Azure Arc Elevation of Privilege Vulnerabilities

Product: Microsoft Azure Arc

CVSS Scores: 9.3 - 10.0

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69399

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70009

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69399

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70009

CVE-2026-69865 - Microsoft Container Registry Elevation of Privilege Vulnerability

Product: Microsoft Container Registry

CVSS Score: 10.0

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69865

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69865

CVE-2026-77903 - Microsoft Dataverse Elevation of Privilege Vulnerability

Product: Microsoft Dataverse

CVSS Score: 9.0

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77903

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77903

CVE-2026-70200, CVE-2026-83944 - Azure Logic Apps Elevation of Privilege Vulnerabilities

Product: Microsoft Azure Logic Apps

CVSS Score: 10.0

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70200

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-83944

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70200

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83944

CVE-2026-85889 - Azure AI Foundry Elevation of Privilege Vulnerability

Product: Microsoft Azure AI Foundry

CVSS Score: 10.0

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-85889

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889

CVE-2026-87701 - Azure Cosmos DB Elevation of Privilege Vulnerability

Product: Microsoft Azure Cosmos DB

CVSS Score: 9.6

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-87701

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87701

CVE-2026-91728 - Chromium CVE-2026-91728: Integer overflow

Product: Google Chrome

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-91728

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91728

CVE-2026-91749 - Chromium CVE-2026-91749: Use after free

Product: Google Chrome

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-91749

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91749

CVE-2026-43786 - macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 have fixed an vulnerability where an app could gain root privileges through additional entitlement checks.

Product: Apple macOS

CVSS Score: 0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-43786

ISC Podcast: https://isc.sans.edu/podcastdetail/10114

CVE-2026-88778 - Citrix NetScaler ADC and Citrix NetScaler Gateway are vulnerable to predictable exact value from previous values.

Product: Citrix NetScaler

CVSS Score: 0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-88778

ISC Podcast: https://isc.sans.edu/podcastdetail/10112

CVE-2026-74849 - Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.

Product: Zohocorp ManageEngine ADSelfService Plus

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-74849

NVD References: https://www.manageengine.com/products/self-service-password/advisory/CVE-2026-74849.html

CVE-2026-86708 - ZohoCorp ManageEngine Applications Manager versions 182200 and below exposed a Google Cloud service-account private key, allowing unauthorized access and modification of cloud resources.

Product: ZohoCorp ManageEngine Applications Manager

CVSS Score: 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86708

NVD References: https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86708.html

CVE-2026-19599 - ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below suffered from a Remote Code Execution vulnerability in the Notification Profile module.

Product: ZohoCorp ManageEngine OpManager MSP

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19599

NVD References: https://www.manageengine.com/itom/advisory/cve-2026-19599.html

CVE-2026-80143, CVE-2026-80144, CVE-2026-80145, CVE-2026-80146, CVE-2026-80147, CVE-2026-80151, CVE-2026-80152, CVE-2026-80154, CVE-2026-80155, CVE-2026-80156 - Multiple vulnerabilities in Lantronix SLC8000/SLC9000, EMG8500/EMG7500, and SLB882/SLCx-03/SLCx-02 firmware.

Product: Lantronix

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80143 (command injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80144 (command injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80145 (command injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80146 (stack-based buffer overflow)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80147 (stack-based buffer overflow)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80151 (command injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80152 (command injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80154 (authentication bypass)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80155 (authentication bypass)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80156 (path traversal)

NVD References:

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-cli-command-injection-via-mfc-eeprom-read

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-cli-command-injection-via-mfc-eeprom-write

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-cli-command-injection-via-set-cifs-password

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-stack-based-buffer-overflow-via-mfc-eeprom-read

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-stack-based-buffer-overflow-via-mfc-eeprom-write

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-os-command-injection-via-set-nfs-download

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-os-command-injection-via-set-script-schedule

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-predictable-session-token-with-validation-bypass

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-unauthenticated-authentication-bypass-via-snprintf-path-truncation

- https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-arbitrary-file-write-via-upload-filename-validation-bypass

CVE-2026-95675 - D-Link DAP-1360 firmware version 6.14 and earlier is vulnerable to unauthenticated remote code execution, allowing attackers to potentially take full control of the device and gain access to the local network.

Product: D-Link DAP-1360 firmware

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-95675

CVE-2026-96891 - D-Link DIR-825 3.00b32 is vulnerable to out-of-bounds write due to the manipulation of the argument peer_hostname in the component rp-l2tp, allowing remote attackers to initiate an attack.

Product: D-Link DIR-825

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-96891

CVE-2026-25254 - Improper authorization leads to Remote Code Execution via SocketIO interface.

Product: Qualcomm Software Center

CVSS Score: 9.

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-25254

NVD References: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html

CVE-2026-65113 - NVIDIA Infrastructure Controller for Linux is vulnerable to hard-coded credentials leading to various potential exploits like privilege escalation, data tampering, denial of service, and information disclosure.

Product: NVIDIA Infrastructure Controller for Linux

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65113

CVE-2026-93088 - SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution due to an unauthenticated ZeroMQ ROUTER socket binding and direct passing of received messages to pickle.loads().

Product: SGLang multimodal generation runtime

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-93088

CVE-2026-94456 - Postiz exposes security-sensitive credentials due to using `Math.random()` for generating credentials, potentially allowing attackers to reconstruct internal PRNG state and compromise credentials of other users and organizations.

Product: Postiz

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-94456

NVD References: https://gadvisory.org/advisories/PSA-2026-TD98KY

CVE-2026-73369, CVE-2026-75699, CVE-2026-75703, CVE-2026-75721, CVE-2026-75723, CVE-2026-75728, CVE-2026-82008, CVE-2026-82009, CVE-2026-82010, CVE-2026-82011, CVE-2026-82013, CVE-2026-82443, CVE-2026-83660, CVE-2026-84412, CVE-2026-89275, CVE-2026-89276 - Multiple vulnerabilities in Adobe Campaign Classic (ACC).

Product: Adobe Campaign Classic

CVSS Scores: 9.1 - 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73369 (code injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75699 (code injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75703 (code injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75721 (code injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75723 (incorrect authorization)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75728 (incorrect authorization)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82008 (improper input validation)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82009 (SQL injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82010 (SQL injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82011 (SQL injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82013 (server-side request forgery)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82443 (server-side request forgery)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-83660 (server-side request forgery)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-84412 (code injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-89275 (code injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-89276 (code injection)

NVD References: https://helpx.adobe.com/security/products/campaign/apsb26-142.html

CVE-2026-75682, CVE-2026-75684, CVE-2026-75686, CVE-2026-75689, CVE-2026-75697, CVE-2026-75698 - Multiple vulnerabilities in Adobe Connect.

Product: Adobe Connect

CVSS Scores: 9.3 - 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75682 (SQL injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75684 (stored cross-site scripting)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75686 (improper input validation)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75689 (stored cross-site scripting)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75697 (stored cross-site scripting)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75698 (reflected cross-site scripting)

NVD References: https://helpx.adobe.com/security/products/connect/apsb26-150.html

CVE-2026-75745, CVE-2026-81995, CVE-2026-82000 - Multiple vulnerabilities in Adobe Experience Manager Forms JEE

Product: Adobe Experience Manager Forms JEE

CVSS Scores: 9.1 - 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75745 (incorrect authorization)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81995 (improper input validation)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82000 (server-side request forgery)

NVD References: https://helpx.adobe.com/security/products/aem-forms/apsb26-151.html

CVE-2026-57149 - plone.app.portlets.portlets allowed authenticated users to execute arbitrary code via the Classic portlet prior to versions 5.0.8, 6.0.4, and 7.0.2.

Product: Plone

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-57149

NVD References: https://github.com/plone/plone.app.portlets/security/advisories/GHSA-rr49-f9g6-c9r5

CVE-2026-77254 - MCP Atlassian allows network callers to access Atlassian products with operator permissions if requests to the HTTP MCP endpoint lack per-user identity prior to version 0.22.0.

Product: MCP Atlassian

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77254

NVD References: https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-vc8m-84rp-53hx

CVE-2026-28324 - SolarWinds Observability Self-Hosted is vulnerable to unauthenticated remote code execution due to lack of integrity checks, affecting non-secure configurations.

Product: SolarWinds Observability Self-Hosted

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-28324

NVD References: https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28324

CVE-2026-76708 - HPE Analytics and Location Engine (ALE) is vulnerable to unauthorized access due to default, hard-coded credentials used by the application and underlying operating system, allowing an unauthenticated remote attacker to potentially gain full system compromise.

Product: HPE Analytics_And_Location_Engine

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76708

NVD References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US

CVE-2026-76709 - HPE Analytics and Location Engine (ALE) is vulnerable to unauthorized write access by unauthenticated remote attackers, potentially leading to full system compromise.

Product: HPE Analytics_And_Location_Engine

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76709

NVD References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US

CVE-2026-87121 - lwIP TCP/IP Stack MQTT allows attackers to gain full code execution on the device due to an out-of-bounds write vulnerability.

Product: lwIP TCP/IP Stack MQTT

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-87121

NVD References: https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-01

CVE-2026-84474 - Red Hat Ansible Automation Platform's automation-controller is vulnerable to a flaw that allows a minimally privileged or unauthenticated remote attacker to launch job templates against arbitrary managed hosts, leading to privilege escalation and remote code execution.

Product: Red Hat Ansible Automation Platform

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-84474

NVD References: https://access.redhat.com/security/cve/CVE-2026-84474

CVE-2026-84502 - Red Hat Ansible Automation Platform's automation-controller allows arbitrary command execution through a flaw in the Project scm_url field validation.

Product: Red Hat Ansible Automation Platform

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-84502

NVD References: https://access.redhat.com/security/cve/CVE-2026-84502

CVE-2026-84719 - The Ansible Automation Platform automation-controller has a flaw that allows a user with certain permissions to copy a WorkflowJobTemplate and launch jobs pinned to unauthorized instance groups, potentially leading to attacker-influenced automation running in the control-plane execution context.

Product: Red Hat Ansible Automation Platform

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-84719

NVD References: https://access.redhat.com/security/cve/CVE-2026-84719

CVE-2026-75884 - AWX is vulnerable to privilege escalation and potential data exfiltration due to a flaw in the container group pod_spec_override field allowing for injection of initContainers and service account overrides.

Product: Red Hat AWX

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75884

NVD References: https://access.redhat.com/security/cve/CVE-2026-75884

CVE-2026-84388 - Fortinet FortiPAM Chrome Extension versions 8.0 and 7.4 may allow remote attackers to disclose information through improper restriction of rendered UI layers or frames.

Product: Fortinet FortiPAM Chrome Extension

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-84388

NVD References: https://fortiguard.fortinet.com/psirt/FG-IR-26-168

CVE-2026-77244 - MCP Atlassian allows unauthorized network clients to access Atlassian tools with operator privileges, prior to version 0.22.0.

Product: MCP Atlassian

CVSS Score: 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77244

NVD References: https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wrhw-j3f9-8vc6

CVE-2026-88414 - MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).

Product: MCMS

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-88414

CVE-2026-16346, CVE-2026-81549 - Vulnerabilities in IBM DataStage on Cloud Pak for Data 5.4.0.0.

Product: IBM DataStage on Cloud Pak for Data

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16346 (improper authorization)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81549 (server-side request forgery)

NVD References: https://www.ibm.com/support/pages/node/7288649

CVE-2026-6721, CVE-2026-6730, CVE-2026-6928, CVE-2026-17472 - Vulnerabilities in IBM Concert 1.0.0 through 3.0.0.

Product: IBM Concert

CVSS Scores: 9.6 - 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6721 (OS command injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6730 (buffer overflow)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6928 (use after free)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-17472 (improper privilege management)

NVD References: https://www.ibm.com/support/pages/node/7288830

CVE-2026-17635, CVE-2026-17645, CVE-2026-18162, CVE-2026-18163, CVE-2026-18169, CVE-2026-18872 - Multiple vulnerabilities in IBM Financial Transaction Manager (FTM) for RedHat OpenShift.

Product: IBM Financial Transaction Manager for RedHat OpenShift

CVSS Scores: 9.1 - 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-17635 (missing authentication for critical function)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-17645 (improper privilege management)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18162 (code injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18163 (improper deserialization of untrusted data)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18169 (path traversal)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18872 (stored cross-site scripting)

NVD References: https://www.ibm.com/support/pages/node/7288641

CVE-2026-89282 - The Apache Lounge Windows distribution of Apache HTTP Server has insecure installation directory permissions on C:\, allowing Authenticated Users write access.

Product: Apache HTTP Server

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-89282

CVE-2026-82331 - The vulnerability in the `tar` source plugin of Apache BuildStream allows malicious source tarballs to write files on the host via symlinks, mitigated by using trusted sources, tracking source tarball hashes, and upgrading to version 2.8.1.

Product: Apache BuildStream

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82331

NVD References: https://lists.apache.org/thread/9b342631x7bvtyg0pq7zgywtl2cmy34v

CVE-2026-76183 - Apache Tomcat is vulnerable to Authentication Bypass by Alternate Name, allowing security constraints for WebSocket endpoints to be circumvented.

Product: Apache Tomcat

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76183

NVD References: https://lists.apache.org/thread/45mxk8nj2q8pkhct6lfxkvtm2jpywrsp

CVE-2026-86248 - Apache Tomcat is vulnerable to unexpected failure of CLIENT_CERT authentication when soft fail is disabled, affecting versions 11.0.0-M14 through 11.0.25, 10.1.22 through 10.1.59, and 9.0.92 through 9.0.121, with recommended upgrades to versions 11.0.26, 10.1.60, or 9.0.122 to resolve the issue.

Product: Apache Tomcat

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86248

NVD References: https://lists.apache.org/thread/nmkmjp9l53y8h3oc4n8fc0bkw9dv15sk

CVE-2026-86350 - Apache Tomcat is susceptible to inconsistent interpretation of HTTP/2 requests vulnerability, which can trigger request header mix-up due to a regression in a previous fix, affecting versions 11.0.22 through 11.0.25, 10.1.55 through 10.1.59, and 9.0.118 through 9.0.121, prompting users to upgrade to versions 11.0.26, 10.1.60, or 9.0.122 for a fix.

Product: Apache Tomcat

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86350

NVD References: https://lists.apache.org/thread/mss45z99lcdd5dtpgcn45dy82f3toswc

CVE-2026-86246 - Apache Tomcat Native is vulnerable to initializing resources with insecure default options, affecting versions 2.0.0 through 2.0.15 and 1.3.0 through 1.3.8, with a recommended upgrade to versions 2.0.16 or 1.3.9 to address the issue.

Product: Apache Tomcat Native

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86246

NVD References: https://lists.apache.org/thread/dgyvfwb24nbk45ptvlhdyhdhl5o7k5ol

CVE-2026-92609 - Apache Qpid Broker-J through version 10.1.0 is vulnerable to session fixation in HTTP management authentication, allowing unauthorized access to authenticated sessions via reused session identifiers.

Product: Apache Qpid Broker-J

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-92609

NVD References: https://lists.apache.org/thread/93w83oro48cqokb24k8tkogyvtlqhqw6

CVE-2026-59167 - SunEditor prior to version 2.47.11 has a vulnerability where the sanitizer does not consistently reject namespaced or custom HTML elements, allowing for stored cross-site scripting attacks.

Product: SunEditor

CVSS Score: 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-59167

NVD References: https://github.com/JiHong88/suneditor/security/advisories/GHSA-6rf4-v2fh-m6p4

CVE-2026-85724 - Moquette, a lightweight Java MQTT broker, is vulnerable to cross-tenant read and write access due to a flaw in pattern-based ACL rules prior to version 0.18.1.

Product: Moquette

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-85724

NVD References: https://github.com/moquette-io/moquette/security/advisories/GHSA-5f42-97gr-vfhq

CVE-2026-95848 - Moquette, a lightweight Java MQTT broker, prior to version 0.18.1 may disable authentication or authorization if a configured authenticator or authorizator class cannot be loaded, due to fallback to default policies.

Product: Moquette

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-95848

CVE-2026-86930 - FileMaker Server for Linux could be exploited by an attacker to reveal process memory by uploading a malicious image file to a container field during thumbnail generation in FileMaker WebDirect.

Product: FileMaker Server

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86930

NVD References: https://support.claris.com/s/answerview?anum=000049218&language=en_US

CVE-2026-86934 - FileMaker Server is vulnerable to an authorization bypass issue that allows unauthorized access to the XML Web Publishing interface, fixed in version 26.0.3.

Product: FileMaker Server

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86934

NVD References: https://support.claris.com/s/answerview?anum=000049217&language=en_US

CVE-2026-89078 - GitLab CE/EE versions 19.2 to 19.4.1 were vulnerable to authenticated users potentially executing arbitrary code through a double free issue in parsing regular expressions in CI/CD configurations.

Product: GitLab

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-89078

CVE-2026-93577 - GitLab was susceptible to an authenticated user executing arbitrary code on the server due to an integer overflow issue in certain versions.

Product: GitLab

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-93577

CVE-2026-19072 - Velociraptor allows a user with minimal role of "investigator" to bypass ACL checks and run arbitrary VQL statements as an administrator user on the server.

Product: Velociraptor

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19072

NVD References: https://docs.velociraptor.app/announcements/advisories/cve-2026-19072/

CVE-2026-88378 - QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().

Product: QuickJS

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-88378

CVE-2026-93641 - Zimbra Classic allows an unauthenticated sender to trigger stored XSS by forging a share notification, enabling unauthorized access to mailbox data.

Product: Zimbra Classic

CVSS Score: 9.3

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-93641

NVD References: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

CVE-2026-93647 - Zimbra Classic allows an unauthenticated calendar sender to trigger stored XSS and access mailbox data by placing active markup in a COUNTER message's RFC From address.

Product: Zimbra Classic

CVSS Score: 9.3

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-93647

NVD References: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

CVE-2026-93642 - Zimbra Modern is vulnerable to a forged share notification exploit that triggers stored XSS, allowing an attacker to access mailbox data and impersonate the victim when a recipient clicks Accept Share.

Product: Zimbra Modern

CVSS Score: 9.3

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-93642

NVD References: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

CVE-2026-93643 - OnlyOffice allows unauthenticated remote attackers to abuse unsigned save fields in supported public Briefcase documents to execute commands as zimbra.

Product: OnlyOffice Document Editing

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-93643

NVD References: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

The following vulnerability needs a manual review:

CVE-2026-84411 - MikroTik RouterOS Integer Underflow vulnerability.Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution or cause a denial of service.

Product: MikroTik RouterOS

References:

- https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06

- https://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros/