Google Pixel September 2026 Update Patches Modem Privilege Escalation Under Targeted Exploitation and 46 Critical Flaws (CVE-2026-58704)

Scope: Google Pixel Devices (All Models Running Security Patch Level Earlier Than 2026-09-05)

Severity: High

Read More

Microsoft Defender "ShieldCrash" Zero-Day Bypasses September 2026 Patch, SYSTEM File Read Confirmed on All Windows Versions

Scope: Microsoft Defender for Windows (All Versions on Windows 10, Windows 11, Windows Server 2025 and All Supported Versions)

Severity: Red

Read More

Microsoft Exchange Server Unauthenticated Network Remote Code Execution via Double-Free Vulnerability (CVE-2026-55007)

Scope: Microsoft Exchange Server (All Supported On-Premises Versions Prior to September 2026 Cumulative Update)

Severity: High

Read More

Gitea Self-Hosted Git Service Unauthenticated RCE Actively Exploited to Deploy Cryptocurrency Miners (CVE-2026-60004)

Scope: Gitea Versions 1.17 through 1.27.0 (All Versions Prior to 1.27.1)

Severity: Red

Read More

ConnectWise ScreenConnect Authentication Bypass Under Active Exploitation Grants Full Remote Control of Managed Endpoints (CVE-2026-77924)

Scope: ConnectWise ScreenConnect (All Versions Prior to Latest Patched Release)

Severity: Red

Read More

MikroTik RouterOS "MikroTrick" Authentication Bypass Chain Seizes Devices Without Credentials (CVE-2026-67277 / CVE-2026-86060)

Scope: MikroTik RouterOS (All Versions Affected by Both CVEs, Prior to Latest Stable Release)

Severity: Red

Read More