Security Digest archive
September 2026
23 editorial briefs, 43 known exploited (cisa kev) additions and 84 critical advisories across 23 digest days.
Wednesday, September 30, 2026
- Act now Cisco SD-WAN Manager CVE-2026-76504: Exploited Auth Bypass
- Act now Zammad CVE-2026-102489/102490: Exploited RCE-to-Root Chain
- KEV CVE-2026-76504 Cisco Catalyst SD-WAN Manager
- Critical 1 advisory: next
Tuesday, September 29, 2026
- KEV CVE-2026-86950 Apple Multiple Products
- Critical 2 advisories: @xhmikosr/decompress, PyJWT
Monday, September 28, 2026
- Patch this week Apple CoreGraphics CVE-2026-86950: Exploited Zero-Day
Sunday, September 27, 2026
- Act now NetScaler CVE-2026-88771/88772: Exploited Pre-Auth RCE
- KEV CVE-2026-88772 Citrix NetScaler
- KEV CVE-2026-88771 Citrix NetScaler
Friday, September 25, 2026
- KEV CVE-2026-87902 WordPress Core
- KEV CVE-2026-67279 MikroTik RouterOS
- KEV CVE-2026-65660 Microsoft SharePoint
- Critical 1 advisory: fof/oauth
Thursday, September 24, 2026
- Check exposure actions-cool Actions Re-Enabled With Mini Shai-Hulud Payload
- KEV CVE-2026-71362 Adobe Commerce and Magento
- KEV CVE-2026-5430 WSO2 Multiple Products
- Critical 5 advisories: github.com/ixofoundation/ixo-blockchain…, decepticon-core, @bytebase/dbhub, org.http4s:http4s-scala-xml_2.12, suneditor
Wednesday, September 23, 2026
- Critical 3 advisories: plone.app.portlets, openc3, io.moquette:moquette-broker
Tuesday, September 22, 2026
- Act now WordPress Core: Page-Template File Inclusion to RCE
- Patch this week Linux AF_UNIX CVE-2026-80521: Public Container Escape
- Check exposure Graphalgo Malware in Go Modules and Terraform Providers
- KEV CVE-2026-94127 F5 BIG-IP APM
- KEV CVE-2026-93952 Arista VeloCloud Orchestrator
- KEV CVE-2026-93616 Check Point Multiple Products
- KEV CVE-2026-85102 Check Point Multiple Products
- Critical 4 advisories: homeassistant, mcp-atlassian, lightrag-hku, github.com/openbao/openbao
Monday, September 21, 2026
- KEV CVE-2026-7273 Zyxel GS1900 Series Switches
Friday, September 18, 2026
- Patch this week Linux Kernel: Five Exploited Root Bugs Added to CISA KEV
- KEV CVE-2026-53266 Linux Kernel
- KEV CVE-2025-39964 Linux Kernel
- KEV CVE-2025-39682 Linux Kernel
- Critical 5 advisories: mnemosyne-memory, github.com/kcp-dev/kcp, anyio, lmdeploy, org.xwiki.rendering:xwiki-rendering-xml
Thursday, September 17, 2026
Wednesday, September 16, 2026
- Act now Cisco ISE CVE-2026-76460: Exploited CVSS 10 Auth Bypass
- KEV CVE-2026-87886 Acronis Backup
- KEV CVE-2026-76460 Cisco Identity Services Engine
- KEV CVE-2026-58704 Google Pixel
- Critical 3 advisories: djust, @zereight/mcp-gitlab, lmdeploy
Tuesday, September 15, 2026
- Patch this week Google Pixel Modem CVE-2026-58704: Exploited Zero-Day
- Check exposure Acronis Backup cPanel Plugin CVE-2026-87886: Exploited LPE
- Critical 3 advisories: @zereight/mcp-gitlab, org.http4s:http4s-ember-core_2.12, @zereight/mcp-gitlab
Monday, September 14, 2026
- Act now Cisco Secure Email Gateway: Two Exploited Root RCE Bugs
- KEV CVE-2026-76461 Cisco Secure Email Gateway
- Critical 1 advisory: esphome-device-builder
Friday, September 11, 2026
- KEV CVE-2026-85706 GitLab Community Edition and Enterprise Edition
- KEV CVE-2026-84869 ConnectWise ScreenConnect
- KEV CVE-2026-42018 JFrog Artifactory
- KEV CVE-2026-42016 JFrog Artifactory
- Critical 4 advisories: mysql-mcp-server, prowler-cloud, yayson, com.linecorp.centraldogma:centraldogma…
Thursday, September 10, 2026
- Act now GitLab CVE-2026-85706: Unauthenticated File Read, Exploited
- KEV CVE-2026-86060 MikroTik RouterOS
- KEV CVE-2026-67277 MikroTik RouterOS
- Critical 4 advisories: github.com/rclone/rclone, github.com/traefik/traefik/v3, github.com/rclone/rclone, omniroute
Wednesday, September 9, 2026
- Act now Check Point: Exploited VPN Gateway and Management RCEs
- KEV CVE-2026-87491 Google Chromium V8
- KEV CVE-2026-20079 Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- KEV CVE-2026-19490 Citrix NetScaler
- KEV CVE-2025-25249 Fortinet Multiple Products
- Critical 1 advisory: org.freemarker:freemarker
Tuesday, September 8, 2026
- Patch this week Windows Zero-Days: Update Stack and ALPC EoP (Sep 2026)
- KEV CVE-2026-86218 N-able N-central
- KEV CVE-2026-85880 Microsoft Windows
- KEV CVE-2026-81963 Microsoft Windows
- KEV CVE-2026-75650 Adobe Commerce and Magento
- Critical 14 advisories: github.com/semaphoreui/semaphore, nltk, predis/predis, nltk, gitea.dev, next, maplibre-gl, cakephp/cakephp, io.netty:netty-handler, Microsoft.Native.Quic.MsQuic.OpenSSL, @deepseek-ai/dsh-client-connection, next …
Monday, September 7, 2026
- Act now Magento StyleSmuggler CVE-2026-75650: Exploited Pre-Auth RCE
- Critical 1 advisory: @sap/cds-mtxs
Friday, September 4, 2026
- KEV CVE-2026-85046 Google Chromium V8
- Critical 2 advisories: github.com/openchoreo/openchoreo, deepseek-tui
Thursday, September 3, 2026
- Act now ScreenConnect CVE-2026-84869: Guest-to-Host File Execution
- Act now MikroTrick: Exploited MikroTik RouterOS SSH Takeover Chain
- Check exposure Chrome V8 Zero-Days CVE-2026-85046 and CVE-2026-87491
- Critical 14 advisories: orval, github.com/siyuan-note/siyuan/kernel, github.com/siyuan-note/siyuan/kernel, github.com/siyuan-note/siyuan/kernel, orval, orval, orval, orval, orval, unstructured, python-jose, orval …
Wednesday, September 2, 2026
- Patch this week LiteLLM Proxy: Three Exploited Flaws in CISA KEV
- KEV CVE-2026-9586 Sangoma Switchvox
- KEV CVE-2026-83549 SonicWall SMA1000 Appliances
- KEV CVE-2026-83548 SonicWall SMA1000 Appliances
- KEV CVE-2026-82329 JFrog Artifactory
- KEV CVE-2026-59822 BerriAI LiteLLM
- KEV CVE-2026-49869 Kestra Kestra OSS
- KEV CVE-2026-48710 Kludex Starlette
- Critical 6 advisories: github.com/openchoreo/openchoreo, orval, omnigent, github.com/centrifugal/centrifugo, orval, github.com/seaweedfs/seaweedfs
Tuesday, September 1, 2026
- Patch this week GitSpawn: Repo Git Config Runs Code in AI Coding Agents
- Critical 1 advisory: nltk