Skip to main content
Redis RESTORE Command Flaw Exploited Five Months After Patch Was Available (CVE-2026-25243)

Scope: Redis redis-server, all versions prior to 8.6.3 (fixed in 6.2.22, 7.2.14, 7.4.9, an

Oracle Releases October 2026 Critical Patch Update With 109 PeopleSoft Fixes Alone

Scope: Oracle Database, E-Business Suite, PeopleSoft, Oracle Communications, Oracle Analyt

PEERSTITCH Memory-Resident Implant Deployed via Chained FortiManager and FortiOS Flaws, Federal Deadline Today (CVE-2025-61624)

Scope: Fortinet FortiOS and FortiManager, devices previously exposed to the FortiJump vuln

China-Nexus Group Exploited BeyondTrust Remote Support Zero-Day Since 2023, Federal Deadline Today (CVE-2026-102764)

Scope: BeyondTrust Remote Support (formerly Bomgar), self-hosted appliances (SaaS customer

SiteGuard WAF Command Injection Under Active Exploitation Grants Root and SYSTEM Access (CVE-2026-106931)

Scope: SiteGuard Server Edition Web Application Firewall, host-based instances with the st

Palo Alto Networks Patches Exploited PAN-OS Management Interface RCE (CVE-2026-0322)

Scope: PAN-OS (Cloud NGFW and Prisma Access not affected)

Subscribe to Advisories