Cisco Secure Email Gateway Zero-Day Exploited Again

By Editorial Team | October 19, 2026
Cisco Secure Email Gateway zero-day CVE-2026-76519: steel inspection box with an envelope in its slot and orange light leaking out

A Cisco Secure Email Gateway zero-day is under attack: one email with a crafted attachment lets an unauthenticated attacker write files and run commands as root. Cisco tracks it as CVE-2026-76519 (CVSS 9.8), and CISA added it to the Known Exploited Vulnerabilities catalog on October 14. It is the second Secure Email Gateway flaw exploited…

Read More

Ivanti Connect Secure Zero-Day Chain Reaches Root

By Editorial Team | October 16, 2026
Ivanti Connect Secure zero-day chain CVE-2026-104935: a brushed-aluminium case with a broken blue tamper seal on a dark wooden floor, headline “Three Ivanti Zero-Days, One Root Shell”

Volexity found an Ivanti Connect Secure zero-day chain that gave one attacker unauthenticated root on a VPN appliance running the latest build at the time. Ivanti has fixed two of the three flaws. As of October 14, the third, the privilege escalation that turns a web-server foothold into root, has no fix. Ivanti’s own Integrity…

Read More

SonicWall SMA1000 SSRF Vulnerability: Third Max Flaw

By Editorial Team | October 14, 2026
SonicWall SMA1000 SSRF vulnerability is the third max-severity flaw in three months. Attempts are reported; patch to 12.4.3-03670 or 12.5.0-03082.

A third maximum-severity flaw in three months has been fixed in SonicWall’s SMA1000 remote-access appliances, and this SonicWall SMA1000 SSRF vulnerability may already be under attack. SonicWall’s October advisory describes an unauthenticated server-side request forgery rated CVSS 10.0. A security firm says its honeypots saw exploitation attempts, while SonicWall says it has no evidence of…

Read More

Citrix NetScaler unauthenticated RCE vulnerability

By Editorial Team | September 29, 2026
Citrix NetScaler unauthenticated RCE vulnerability lets attackers run commands with no login. Two zero-days exploited, patch now, CISA deadline Sep 30.

Citrix confirmed on September 27 that a Citrix NetScaler unauthenticated RCE vulnerability, tracked as two separate CVEs, was already being exploited in the wild before any patch existed. CVE-2026-88771 lets an attacker with no credentials run arbitrary commands on any NetScaler ADC or Gateway appliance in a vulnerable version, default configuration included. Its sibling flaw,…

Read More

Arista VeloCloud Orchestrator vulnerability

By Editorial Team | September 28, 2026
An Arista VeloCloud Orchestrator vulnerability (CVSS 10.0) lets attackers reach privileged functions with no credentials. Patch and hunt for backdoors now.

An Arista VeloCloud Orchestrator vulnerability, CVE-2026-93952 (CVSS 10.0), lets an attacker reach privileged internal functions on the on-premises controller for an entire SD-WAN fabric without any credentials at all. Arista confirmed active exploitation and shipped a patch on September 22. This is the second maximum-severity CVE in this exact product line in 2026, after the…

Read More