Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
Broadcom has released urgent security updates to fix a critical integer overflow vulnerability (CVE-2026-59346) in VMware Workstation and Fusion. This flaw, which has a CVSS score
Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)
Attackers are actively exploiting a chain of vulnerabilities known as 'MikroTrick' in MikroTik RouterOS routers with the SSH service exposed to the Internet. CERT Polska
N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)
N-able has urgently released the fourth hotfix in five weeks for its N-central remote monitoring and management (RMM) platform. The update fixes vulnerability CVE-2026-86218, rated
Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed
Microsoft set a new historic record by releasing fixes for as many as 973 vulnerabilities in the September 2026 Patch Tuesday, far surpassing the previous record of 664 updates in
Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed
Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws
GitLab fixes CVSS 10 vulnerability already targeted by hostile scans
GitLab has released updates for several vulnerabilities in Community Edition and Enterprise Edition, including two critical flaws and six high-severity issues. The most urgent is C
CISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency has added five vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known
GitLab: Critical CVE-2026-85706 Vulnerability Exploited Within 24 Hours
GitLab has disclosed CVE-2026-85706, a path traversal vulnerability with a CVSS score of 10.0 in the repository commits API. An unauthenticated attacker can send a single specially
Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges
Cisco has fixed CVE-2026-76461, a critical vulnerability in Secure Email Gateway's email parsing that is already being actively exploited. An unauthenticated remote attacker c
Cisco Secure Email Gateway zero-day actively exploited with root privileges
Cisco has fixed CVE-2026-76461, a critical vulnerability with a CVSS score of 9.8 affecting Secure Email Gateway that is already being exploited in real-world attacks. The flaw ste