BREAKING: Windows zero-day lets booby-trapped files skip the download warning (CVE-2026-96951)
How to fix CVE-2026-96951: install the October 2026 Windows update. Exploited Windows Shell bug lets crafted files skip Mark of the Web warnings.
12 stories
How to fix CVE-2026-96951: install the October 2026 Windows update. Exploited Windows Shell bug lets crafted files skip Mark of the Web warnings.
How to fix CVE-2026-88779: upgrade NetScaler ADC/Gateway to 14.1-73.41 or 13.1-64.28. Same-day CISA KEV on NetScaler SAML memory-overflow DoS.
How to fix CVE-2026-104286: disable FortiMail IBE (config system encryption ibe / set status disable) or upgrade to upcoming 8.0.2 / 7.6.7 / 7.4.9. Same-day CISA KEV on unauthenticated FortiMail path traversal.
How to fix CVE-2026-76504: upgrade Cisco Catalyst SD-WAN Manager to 20.9.10.1 / 20.12.8.2 / 20.15.6.1 / 20.18.4.1 / 26.1.2.1 / 26.2.1. Same-day CISA KEV on Cisco SD-WAN Manager admin API bypass; federal due 2026-10-03.
How to fix CVE-2026-86950: update to iOS/iPadOS 26.7.1, macOS Sequoia 15.8.1, or macOS Tahoe 26.7.1. Same-day CISA KEV on Apple CoreGraphics OOB write with Apple exploitation acknowledgment.
How to fix CVE-2026-88771: upgrade NetScaler ADC/Gateway to 14.1-73.37 or 13.1-64.23
How to fix CVE-2026-87902: upgrade WordPress to 7.1.2 (or your branch patch). Same-day CISA KEV on WordPress Core page-template LFI with conditional RCE.
How to fix CVE-2026-65660: upgrade SharePoint Server to the August 2026 fixed builds (SE 16.0.19725.20522 / 2019 16.0.10417.20198 / 2016 16.0.5565.1001). Same-day CISA KEV on SharePoint code injection RCE.
How to fix CVE-2026-71362: upgrade Adobe Commerce and Magento Open Source to the matching *-2026-aug security train (or APSB26-92 Isolated patch). Same-day CISA KEV on Magento incorrect authorization, no login.
CVE-2026-94127 affects BIG-IP APM when configured as an OAuth Authorization Server. OAuth Client-only and Resource Server-only deployments are not affected.
How to fix CVE-2026-84869: upgrade ScreenConnect to 26.6.5 or later, then reinstall host clients and update access agents. Same-day CISA KEV on client file-transfer execution without Host confirmation.
How to fix CVE-2026-85706: upgrade GitLab to 18.11.12 / 19.0.9 / 19.1.8 / 19.2.6 / 19.3.2
Showing 12 of 12 stories
You're all caught up.
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news
Join 15,000+ AI enthusiasts