Advisories 5 October 2026

MikroTik RouterOS Pre-Authentication Integer Underflow Allows Root Code Execution With a Single Request (CVE-2026-84411)

Scope: MikroTik RouterOS versions earlier than 7.24

Advisories 5 October 2026
Dell Container Storage Modules Flaws Expose Storage Admin Credentials Without Any Login (CVE-2026-63688 / CVE-2026-63692)

Scope: Dell Container Storage Modules (CSM) prior to version 1.17.0, including CSM Authori

Advisories 5 October 2026
FortiMail Zero-Day Lets Unauthenticated Attackers Write Files to the Mail Gateway and Is Already Exploited (CVE-2026-104286)

Scope: Fortinet FortiMail 8.0.0 to 8.0.1, 7.6.0 to 7.6.6, 7.4.0 to 7.4.8, and 7.2.0 to 7.2

Advisories 30 September 2026
WordPress Core Path Traversal Flaw Remains Under Active Scanning a Week After Disclosure (CVE-2026-87902)

Scope: WordPress Core, All Versions Prior to 7.1.2 (Fix Backported to 4.7)

Advisories 30 September 2026
Oracle PeopleSoft Sees Renewed Mass Exploitation as Attackers Bypass WAF Protections (CVE-2026-35273)

Scope: Oracle PeopleSoft (Internet-Facing Deployments, Particularly Those Relying on WAF R

Advisories 30 September 2026
Citrix NetScaler Flaw Now Confirmed Deployed for Root Access and Web Shells in Real Attacks (CVE-2026-88772)

Scope: Citrix NetScaler ADC and NetScaler Gateway with DTLS Enabled (On by Default on VPN

Advisories 29 September 2026
F5 BIG-IP APM OAuth Remote Code Execution Remains a Priority Past Its Federal Deadline (CVE-2026-94127)

Scope: F5 BIG-IP Systems Where APM Is Configured as an OAuth Authorization Server on the S

Subscribe to Advisories