Check Point VPN RCE Flaws: CVE-2026-85102 & CVE-2026-85103
Check Point has issued emergency hotfixes for two critical CVSS 9.8 vulnerabilities affecting Security Gateways and Management Servers using Remote Access or Site-to-Site VPN.
Vulnerabilities & CVEs
Newly disclosed vulnerabilities, exploitation status, patches and mitigations.
Ivanti Connect Secure Zero-Day Exploit Chain Patched
Ivanti has issued emergency patches for CVE-2026-111357 and CVE-2026-118527, two zero-day vulnerabilities actively chained with an authentication bypass to achieve unauthenticated root execution.
F5 BIG-IP APM Heap Overflow CVE-2026-94127 RCE Mitigation
Examine CVE-2026-94127, a critical heap-based buffer overflow in F5 BIG-IP APM allowing unauthenticated remote code execution. Learn indicators and remediation.
WordPress Core Upgrade Race Condition RCE Vulnerability Analysis
WordPress Core versions 4.7 through 7.1.3 contain a high-severity remote code execution vulnerability driven by a predictable upgrade staging path and a narrow race condition window.
Drupal Commerce Core Flaw CVE-2026-118539 Under Active Attack
Drupal maintainers have issued an urgent patch advisory for an actively exploited access bypass vulnerability in Commerce Core. CVE-2026-118539 allows unauthenticated attackers to manipulate routes and entity fields.
CVE-2026-97229: Alpine Incident Exposes Custom Ruby Build Risks
Alpine Linux rebuilt its GitLab infrastructure after an attacker probed CVE-2026-97229, revealing how non-omnibus deployments missed vendor-bundled Ruby fixes.
Hitachi Energy Patches TRO600 Arbitrary File Read Flaw
Hitachi Energy has patched two security vulnerabilities in its TRO600 series routers, including an unauthenticated arbitrary file read vulnerability that exposes sensitive configuration and password data.
Siemens Mendix SAML Authentication Bypass Vulnerability CVE-2026-89209
Siemens Mendix SAML modules are impacted by CVE-2026-89209, an authentication bypass vulnerability involving capture-replay in IdP-initiated flows.
GitLab CVE-2026-97229: Critical Integer Overflow Exploitation
Alpine Linux fended off an exploit attempt targeting CVE-2026-97229, a CVSS 10.0 integer overflow vulnerability in GitLab. Explore the mechanism, KEV addition, and remediation requirements.
Oracle EBS Flaw CVE-2026-101767 Under Active Exploitation
Active exploitation has begun against Oracle E-Business Suite flaw CVE-2026-101767 while researchers break down a three-bug PeopleSoft attack chain. Enterprise defenders must audit and patch immediately.
Cisco ASA CVE-2026-76418 SSL VPN Flaw Under Active Attack
Cisco has issued urgent updates for an actively exploited CVSS 8.6 vulnerability in ASA and FTD SSL VPN services. Pre-authentication logic errors allow remote attackers to force device reloads.
CVE-2026-41709: VMware ESX Logging Flaw Exploited as Zero-Day
CISA has added VMware ESX flaw CVE-2026-41709 to its KEV catalog after reports revealed its active use as a zero-day by state-nexus actor Warp Panda.