#CISA KEV
CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited
CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited | 2026 Executive Summary Citrix has released emergency updates for CVE-2026-88779, a newly assigned Net...
Lucas Oliveira
Research
CVE-2026-102489: Zammad Zero-Day Chain Hits Root
CVE-2026-102489: Zammad Zero-Day Chain Hits Root | 2026 Executive Summary Since September 21, 2026, the chained CVE-2026-102489 and CVE-2026-102490 vulnerabilit...
Lucas Oliveira
Research
CISA's Latest KEV Additions Put WSO2, Adobe Commerce, SharePoint, and MikroTik on a Short Clock
CISA's Latest KEV Additions Put WSO2, Adobe Commerce, SharePoint, and MikroTik on a Short Clock CISA's newest Known Exploited Vulnerabilities update is a useful...
Lucas Oliveira
Research
CISA deadline arrives for exploited Linux kernel AF_ALG race condition
CISA deadline arrives for exploited Linux kernel AFALG race condition CISA's September 21 remediation deadline for CVE-2025-39964 should push this Linux kernel...
Lucas Oliveira
Research
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock CISA's latest Known Exploited Vulnerabilities update is not just another list of...
Lucas Oliveira
Research
Citrix NetScaler CVE-2026-8452 is now a KEV patch priority
Citrix NetScaler CVE-2026-8452 is now a KEV patch priority Executive Summary CISA's latest Known Exploited Vulnerabilities update has turned CVE-2026-8452 from...
Lucas Oliveira
Research
Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident
Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident Self-hosted source control is rarely treated like an internet-facing edge appliance,...
Lucas Oliveira
Research
CISA Adds Oracle WebLogic Proxy Plug-in Flaw to KEV as Exploitation Pressure Rises
CISA Adds Oracle WebLogic Proxy Plug-in Flaw to KEV as Exploitation Pressure Rises CISA has added CVE-2026-21962, a maximum-severity Oracle HTTP Server and Orac...
Lucas Oliveira
Research
CISA Warns of Active Exploitation in Zimbra Collaboration Suite
CISA Warns of Active Exploitation in Zimbra Collaboration Suite CISA has added CVE-2026-73570, an operating-system command injection flaw in Zimbra Collaboratio...
Lucas Oliveira
Research
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide | 2026 Executive Summary Since August 18, 2026, the critical CVE-2026-33824 vulnerability in Microsof...
Lucas Oliveira
Research
Cisco FMC Static Credential Flaw Lands in KEV After Active Exploitation
Cisco FMC Static Credential Flaw Lands in KEV After Active Exploitation Cisco has released hot fixes for CVE-2026-20316, a static credential [vulnerability](htt...
Lucas Oliveira
Research
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius Arista's July 27 advisory on CVE-2026-16812 deserves immediate attention because the aff...
Lucas Oliveira
Research