Alert

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is alerting people about a major flaw in MikroTik RouterOS. This could allow hackers to run code from afar or stop the system from working. Tracked as CVE-2026-84411, the security issue is a pre-authentication integer underflow in RouterOS’s web-management HTTP request handling. CISA …

Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been used in a very advanced attack on specific people. The security flaw, labeled as CVE-2026-86950, impacts the CoreGraphics framework. This is an important Apple part that helps show graphics, images, …

Microsoft has fixed a serious security flaw in Azure AI Foundry that could let bad actors gain privilege escalation. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0. “Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,” Microsoft …

A threat actor is allegedly offering a private remote code execution exploit for Fortinet FortiGate SSL VPN appliances, claiming that FortiOS 7.2.x and 7.4.x are affected. The listing has not been independently verified and does not confirm the existence of a new FortiGate zero-day vulnerability. The ad by Dark Web …

CISA has added a serious Cisco Secure Email Gateway flaw to its list of known exploits. They warn that attackers are using this flaw in real attacks. The flaw, known as CVE-2026-76461, impacts Cisco AsyncOS software on Cisco Secure Email Gateway devices. CVE-2026-76461 is a type of SQL injection flaw, listed …

GitLab has released an important security update to fix two serious problems. These issues could allow unauthorized file access and credential theft. There is also a major flaw that might let someone run code from afar. The company launched new versions of GitLab Community Edition and Enterprise Edition. These are versions …

Palo Alto Networks has revealed a serious flaw in PAN-OS. It may let a remote attacker without a password run any code with full control on affected PA-Series hardware firewalls. Tracked as CVE-2026-0310, the flaw is in XML processing, and the seller says it is very urgent. The weakness is …

Cisco has said that a serious security flaw CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being used in attacks. The flaw has a highest CVSS score of 10.0. It lets remote attackers, who are not logged in, get around security checks and run scripts or commands as the …

cPanel has shared CVE-2026-67401, a serious SQL injection flaw in EmailTrack. This flaw could allow attackers with permission to take full control of affected servers. cPanel announced this issue on September 8, 2026. They say that an attacker needs a valid cPanel account with email rights to use this weakness. …

An ongoing attack is focused on FortiGate firewalls. Hackers use a serious flaw to install a special Node.js remote access trojan (RAT). This makes the affected devices key points for spying and stealing information. The SOCRadar Threat Research Unit has found that attackers are using CVE-2025-25249. This is a serious …