60
60
60
60
Critical N-able N-central Vulnerability and Active Exploitation
N-able N-central pre-auth RCE zero-day CVE-2026-86218 (CVSS 10.0) is exploited in the wild; on-prem admins must upgrade to 2026.3 HF4.
N-able disclosed a third N-central vulnerability, CVE-2026-86218, a pre-authentication RCE rated CVSS 10.0, and released hotfix 2026.3 HF4 superseding build 2026.3.1.13. Huntress reproduced an exploit chain involving an authentication bypass (CVE-2026-86206/CVE-2026-86207) after a fully patched customer's N-central production server was compromised on September 4. Attackers appended strings like .invalid to account names and probed the /remoteControlAction.do?method=getPierDetails endpoint; Huntress worked with Cloudflare to disable adversary tunnel infrastructure. Hosted N-central instances are already patched; on-prem administrators must upgrade immediately.
83
60
60
60
60
60
60
60
Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation
60
60
Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities
60
Microsoft patches two zero-days exploited in the wild (CVE-2024-43573, CVE-2024-43572)
60
Unpatchable 0-day in surveillance cam is being exploited to install Mirai
60
60
60
60
60
60
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
SonicWall SMA1000 appliances face active exploitation of chained CVE-2026-83548 and CVE-2026-83549 enabling unauthenticated RCE; hotfixes released.
SonicWall disclosed on September 1, 2026 that CVE-2026-83548, a critical pre-authentication SSRF in the SMA1000 Appliance Work Place interface (CVSS 10.0), and CVE-2026-83549, an authenticated OS command injection in the Appliance Management Console, can be chained for unauthenticated remote code execution. Both vulnerabilities are confirmed exploited in the wild and were added to CISA's Known Exploited Vulnerabilities catalog. Affected SMA1000 models 6210, 7210 and 8200v on versions 12.4.3-03453 and 12.5.0-02835 platform-hotfix or earlier require upgrades to 12.4.3-03526 or 12.5.0-02952 platform-hotfixes.
88
60
U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog
60
60
Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited
60
U.S. CISA adds Cisco, SonicWall, and ASUS flaws to its Known Exploited Vulnerabilities catalog
60
September 2025 CVE Landscape
60
Trend Micro fixes critical bugs in Apex Central and TMEE PolicyServer
60
U.S. CISA adds six Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog
60
U.S. CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog
60
Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited
60
U.S. CISA adds Ivanti CSA and Fortinet bugs to its Known Exploited Vulnerabilities catalog
60
Ivanti: Three CSA Zero
60
Three new Ivanti CSA zero
60
60
60
Trend Micro addresses actively exploited Apex One zero
60
60