October 2026 Exploited Vulnerabilities: CISA KEV Patch Roundup
Exploited vulnerabilities October 2026: PAN-OS, Cisco email gateway, SonicWall SMA1000, SiteGuard, Siemens and Apple. Fixed versions and actions.
0 Comments
October 28, 2026
AhsayCBS CVE-2026-105134: Backup Server Flaw Exploited
An AhsayCBS vulnerability chain is being exploited on MSP backup servers. Hotfix builds, version checks, IOCs and steps to protect your backups.
October 28, 2026
Warlock SharePoint Ransomware: Patch, Hunt and Rotate Keys
SharePoint ransomware from Warlock hit a water utility and telecom firm. Safe builds, AMSI, machine key rotation and IOC checks for on-prem farms.
October 28, 2026
BeyondTrust Remote Support Zero-Day CVE-2026-102764: What to Do
A BeyondTrust vulnerability (CVE-2026-102764) in Remote Support was exploited as a zero-day since August. Who is affected, how to patch, and what to check.
October 28, 2026
NetScaler CVE-2026-88771 Exploited: Patch, Check, Clean Up
NetScaler vulnerability CVE-2026-88771 was exploited as a zero-day. See the fixed builds, the later SAML zero-days and how to hunt for web shells.
October 27, 2026
Atlassian CVE-2026-21589: Jira and Confluence Flaw Exploited
Atlassian vulnerability CVE-2026-21589 lets attackers read files from Jira, Confluence and Bitbucket. Fixed versions, mitigations and log checks.
October 27, 2026
FortiMail Vulnerability CVE-2026-104286 Exploited: Patch Now
Exploited FortiMail vulnerability CVE-2026-104286 lets attackers write files without login. Fixed versions, IBE workaround, IOCs and log checks.
October 27, 2026
Ivanti Connect Secure Zero-Day CVE-2026-104935: What to Do
An exploited Ivanti Connect Secure vulnerability (CVE-2026-104935) gave attackers root. Fixed versions, IOCs, reset steps and the unpatched third flaw.
October 27, 2026
VeloCloud Vulnerability CVE-2026-114625 Exploited: Patch Now
Exploited VeloCloud vulnerability CVE-2026-114625 lets any VCO user become operator. Fixed versions, IOCs, log checks and a patch checklist.
October 26, 2026