vulnerability
SonicWall SSL-VPN MFA Bypass Is Being Exploited: Patch the Authentication Boundary
SonicWall SSL-VPN MFA Bypass Is Being Exploited: Patch the Authentication Boundary SonicWall has warned that attackers are exploiting a vulnerability in SonicOS...
Lucas Oliveira
Research
Barracuda ESG Flaws Chain to Root Access: Why the Admin UI Is Now a Critical Boundary
Barracuda ESG Flaws Chain to Root Access: Why the Admin UI Is Now a Critical Boundary Barracuda has disclosed two vulnerabilities that can be chained to take ov...
Lucas Oliveira
Research
Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active
Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active Organizations that patched Ivanti Connect Secure after the firs...
Lucas Oliveira
Research
GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue
GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue GitLab self-managed administrators have a narrow remediation window for CVE...
Lucas Oliveira
Research
Veeam Backup Servers Face a Critical Unauthenticated Authorization Bypass
Veeam Backup Servers Face a Critical Unauthenticated Authorization Bypass Veeam’s October security release puts backup infrastructure back in the critical patch...
Lucas Oliveira
Research
Redis RESTORE Flaw Is Now Exploited: Patch CVE-2026-25243 and Restrict the Command
Redis RESTORE Flaw Is Now Exploited: Patch CVE-2026-25243 and Restrict the Command The Canadian Centre for Cyber Security has updated its Redis advisory to say...
Lucas Oliveira
Research
Arista VeloCloud Orchestrator Zero-Day: Patch the SD-WAN Control Plane Now
Arista VeloCloud Orchestrator Zero-Day: Patch the SD-WAN Control Plane Now Arista has confirmed active exploitation of CVE-2026-114625, a critical [SQL injectio...
Lucas Oliveira
Research
CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure | 2026 Executive Summary CVE-2026-109618 and CVE-2026-109619 affect PHP runtimes and are collectivel...
Lucas Oliveira
Research
Microsoft Fixes Exploited Windows Shell Zero-Day Behind Mark-of-the-Web Bypass
Microsoft Fixes Exploited Windows Shell Zero-Day Behind Mark-of-the-Web Bypass Executive Summary Microsoft's October 2026 Patch Tuesday landed with an unusually...
Lucas Oliveira
Research
Another Critical NetScaler Flaw Keeps Edge Risk in the Spotlight
Another Critical NetScaler Flaw Keeps Edge Risk in the Spotlight Citrix has warned customers about CVE-2026-107406, a critical memory overflow vulnerability in...
Lucas Oliveira
Research
Atlassian Emergency Patches Put Data Center Exposure Back in Focus
Atlassian Emergency Patches Put Data Center Exposure Back in Focus Atlassian has shipped emergency fixes for CVE-2026-21589, a high-severity arbitrary file acce...
Lucas Oliveira
Research
CVE-2026-104286: FortiMail File Write Zero-Day
CVE-2026-104286: FortiMail File Write Zero-Day | 2026 Executive Summary Since October 1, 2026, the critical CVE-2026-104286 vulnerability in Fortinet FortiMail...
Lucas Oliveira
Research