#Patch Management

GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue GitLab self-managed administrators have a narrow remediation window for CVE...

Lucas Oliveira

Research

Veeam Backup Servers Face a Critical Unauthenticated Authorization Bypass Veeam’s October security release puts backup infrastructure back in the critical patch...

Lucas Oliveira

Research

Redis RESTORE Flaw Is Now Exploited: Patch CVE-2026-25243 and Restrict the Command The Canadian Centre for Cyber Security has updated its Redis advisory to say...

Lucas Oliveira

Research

Arista VeloCloud Orchestrator Zero-Day: Patch the SD-WAN Control Plane Now Arista has confirmed active exploitation of CVE-2026-114625, a critical [SQL injectio...

Lucas Oliveira

Research

CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure | 2026 Executive Summary CVE-2026-109618 and CVE-2026-109619 affect PHP runtimes and are collectivel...

Lucas Oliveira

Research

Microsoft Fixes Exploited Windows Shell Zero-Day Behind Mark-of-the-Web Bypass Executive Summary Microsoft's October 2026 Patch Tuesday landed with an unusually...

Lucas Oliveira

Research

Atlassian Emergency Patches Put Data Center Exposure Back in Focus Atlassian has shipped emergency fixes for CVE-2026-21589, a high-severity arbitrary file acce...

Lucas Oliveira

Research

CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited | 2026 Executive Summary Citrix has released emergency updates for CVE-2026-88779, a newly assigned Net...

Lucas Oliveira

Research

CVE-2026-102489: Zammad Zero-Day Chain Hits Root | 2026 Executive Summary Since September 21, 2026, the chained CVE-2026-102489 and CVE-2026-102490 vulnerabilit...

Lucas Oliveira

Research

CISA's Latest KEV Additions Put WSO2, Adobe Commerce, SharePoint, and MikroTik on a Short Clock CISA's newest Known Exploited Vulnerabilities update is a useful...

Lucas Oliveira

Research

CVE-2026-87902: WordPress Template RCE Risk | 2026 Executive Summary Since September 22, 2026, the critical CVE-2026-87902 vulnerability in WordPress has become...

Lucas Oliveira

Research

CVE-2026-76460: Cisco ISE Auth Bypass Zero-Day | 2026 Executive Summary Since September 16, 2026, the critical CVE-2026-76460 vulnerability in Cisco Identity Se...

Lucas Oliveira

Research