October 2026 Exploited Vulnerabilities: CISA KEV Patch Roundup
Exploited vulnerabilities October 2026: PAN-OS, Cisco email gateway, SonicWall SMA1000, SiteGuard, Siemens and Apple. Fixed versions and actions.
Exploited vulnerabilities October 2026: PAN-OS, Cisco email gateway, SonicWall SMA1000, SiteGuard, Siemens and Apple. Fixed versions and actions.
NetScaler vulnerability CVE-2026-88771 was exploited as a zero-day. See the fixed builds, the later SAML zero-days and how to hunt for web shells.
Exploited FortiMail vulnerability CVE-2026-104286 lets attackers write files without login. Fixed versions, IBE workaround, IOCs and log checks.
An exploited Ivanti Connect Secure vulnerability (CVE-2026-104935) gave attackers root. Fixed versions, IOCs, reset steps and the unpatched third flaw.
Exploited VeloCloud vulnerability CVE-2026-114625 lets any VCO user become operator. Fixed versions, IOCs, log checks and a patch checklist.
The k0t VPN credentials leak exposed 70,000+ firewall logins via FortiGate, FortiWeb and GlobalProtect. Patch, rotate, hunt IOCs and report to CERT-In.
What DHCP is and how to configure DHCP on a Cisco router: enable the DHCP server, create an address pool, set the gateway and DNS, and verify leases.
Border Gateway Protocol (BGP) explained: how internet routing between autonomous systems works, BGP path selection and common use cases.
AAA in networking explained: authentication, authorization and accounting, RADIUS vs TACACS+, and a working Cisco AAA configuration with local fallback.
VLAN Trunking Protocol (VTP) explained: server, client, transparent and off modes, versions 1 to 3, the revision risk and Cisco commands.