Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flaw
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-8088 | WinRAR Path Traversal (CVE-2025-8088) Enables Arbitrary Code Execution | 8.4 | 94% | KEVRansomware | KEV |
| CVE-2026-1281 | Unauthenticated RCE in Ivanti Endpoint Manager Mobile (EPMM) | 9.8 | 99% | KEVPoC | KEV |
| CVE-2026-21509 | Local Security Feature Bypass in Microsoft Office Under Active Exploitation | 7.8 | 71% | KEV | KEV |
| CVE-2026-24858 | FortiCloud SSO Authentication Bypass Across Multiple Fortinet Products | 9.8 | 87% | KEV | KEV |
From the original article
12 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: In this Help Net Security interview, Matthew Kwiatkowski, CISO at Fermilab, America’s particle physics and accelerator laboratory, discusses where cybersecurity blind spots emerge, why availability can outweigh confidentiality, and how security teams protect complex, legacy-driven research infrastructure while…
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.