BREAKING: NetScaler SAML memory overflow hits CISA KEV
How to fix CVE-2026-88779: upgrade NetScaler ADC/Gateway to 14.1-73.41 or 13.1-64.28. Same-day CISA KEV on NetScaler SAML memory-overflow DoS.
14 stories
How to fix CVE-2026-88779: upgrade NetScaler ADC/Gateway to 14.1-73.41 or 13.1-64.28. Same-day CISA KEV on NetScaler SAML memory-overflow DoS.
How to fix CVE-2026-102489: upgrade Zammad to 7.2.0. Same-day CISA KEV on Zammad session fixation RCE chained with local privilege escalation CVE-2026-102490. Due 2026-10-05.
How to fix CVE-2026-104286: disable FortiMail IBE (config system encryption ibe / set status disable) or upgrade to upcoming 8.0.2 / 7.6.7 / 7.4.9. Same-day CISA KEV on unauthenticated FortiMail path traversal.
How to fix CVE-2026-76504: upgrade Cisco Catalyst SD-WAN Manager to 20.9.10.1 / 20.12.8.2 / 20.15.6.1 / 20.18.4.1 / 26.1.2.1 / 26.2.1. Same-day CISA KEV on Cisco SD-WAN Manager admin API bypass; federal due 2026-10-03.
How to fix CVE-2026-76504: upgrade Cisco Catalyst SD-WAN Manager to 20.9.10.1 / 20.12.8.2 / 20.15.6.1 / 20.18.4.1 / 26.1.2.1 / 26.2.1. Same-day Cisco PSIRT advisory with active exploitation; unauth admin API via URI-encoding bypass.
How to fix CVE-2026-86950: update to iOS/iPadOS 26.7.1, macOS Sequoia 15.8.1, or macOS Tahoe 26.7.1. Same-day CISA KEV on Apple CoreGraphics OOB write with Apple exploitation acknowledgment.
How to fix CVE-2026-88771: upgrade NetScaler ADC/Gateway to 14.1-73.37 or 13.1-64.23
How to fix CVE-2026-87902: upgrade WordPress to 7.1.2 (or your branch patch). Same-day CISA KEV on WordPress Core page-template LFI with conditional RCE.
How to fix CVE-2026-65660: upgrade SharePoint Server to the August 2026 fixed builds (SE 16.0.19725.20522 / 2019 16.0.10417.20198 / 2016 16.0.5565.1001). Same-day CISA KEV on SharePoint code injection RCE.
How to fix CVE-2026-71362: upgrade Adobe Commerce and Magento Open Source to the matching *-2026-aug security train (or APSB26-92 Isolated patch). Same-day CISA KEV on Magento incorrect authorization, no login.
CVE-2026-94127 affects BIG-IP APM when configured as an OAuth Authorization Server. OAuth Client-only and Resource Server-only deployments are not affected.
How to fix CVE-2026-84869: upgrade ScreenConnect to 26.6.5 or later, then reinstall host clients and update access agents. Same-day CISA KEV on client file-transfer execution without Host confirmation.
How to fix CVE-2026-85706: upgrade GitLab to 18.11.12 / 19.0.9 / 19.1.8 / 19.2.6 / 19.3.2
How to fix CVE-2026-42018 / CVE-2026-42016: upgrade self-hosted Artifactory past the anonymous-JWT and token-scope floors (prefer 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, or 7.161.20)
Showing 14 of 14 stories
You're all caught up.
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news
Join 15,000+ AI enthusiasts