Critical FortiMail zero-day actively exploited and added to the KEV catalog
Fortinet has confirmed the active exploitation of CVE-2026-104286, a critical zero-day vulnerability in FortiMail email security gateways. The flaw, rated with a CVSS score of 9.8,
Citrix NetScaler zero-days exploited globally and new high-severity vulnerability
Citrix has released updates for several critical and high-severity vulnerabilities affecting NetScaler ADC and Gateway, platforms frequently exposed to the Internet for remote appl
Citrix NetScaler zero-day exploited to take SAML deployments offline
Citrix has fixed CVE-2026-88779, a memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that has already been exploited in targeted attacks. The flaw, rated 8.7 out
Chrome/V8 zero-day actively exploited and added to the CISA KEV catalog
Google has released an urgent update for Chrome that fixes 12 vulnerabilities, including CVE-2026-85046, a type confusion flaw in the V8 engine already exploited in the wild. The f
Zero-day SonicWall SMA 1000 exploited in the wild
SonicWall has patched two vulnerabilities in SMA 1000 gateways already exploited in real-world attacks: CVE-2026-83548, a pre-authentication SSRF, and CVE-2026-83549, a post-authen
PaperCut: zero-day under attack, emergency patch released
PaperCut Software has confirmed that a zero-day vulnerability in the NG and MF products has already been actively exploited in real-world attacks. The company has released an emerg
PaperCut under attack with an already exploited zero-day
PaperCut has confirmed that a vulnerability in the NG and MF products is being actively exploited in zero-day attacks. The company has released emergency patches for v25 and v26 an
LegacyHive Windows zero-day gives local users SYSTEM privileges
Researchers known as Nightmare Eclipse or Chaotic Eclipse publicly released LegacyHive, a proof-of-concept exploit for a Windows privilege-escalation flaw affecting the User Profil