Active Exploitation

Cybersecurity 6 min The Magento Hotfix Is the Easy Half. Rotating the Encryption Key Is the Rest. CVE-2026-75650 is unauthenticated RCE at CVSS 10.0, exploited three days before the fix. The payload runs when... PR Priya Nair 9 Sep Cybersecurity 6 min N-able's Fourth N-central Hotfix in Five Weeks, and Hotfix 3 Does Not Cover It CVE-2026-86218 is a pre-auth RCE at CVSS 10.0, already exploited. The customer notice calls it a zero-day obse... KE Kenji Tanaka 8 Sep Cybersecurity 6 min Two Chained Flaws Give Full Control of a MikroTik Router, and the Attacks Came First CERT Polska confirms exploitation from 2 September; the fixes landed on the 5th. The giveaway is a log entry r... PR Priya Nair 7 Sep Cybersecurity 7 min PaperCut's First Emergency Patch Was Bypassable. Here Is the Second One. PaperCut has shipped a second emergency patch after researchers walked around the first. A vendor under active... PR Priya Nair 1 Sep