April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More
60
60
60
60
Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack
60
60
60
60
US Cyber Command: Patch Critical Atlassian Bug Now
60
60
60
2026-001: Critical vulnerabilities in Ivanti EPMM
Ivanti EPMM has two critical CVSS 9.8 flaws allowing unauthenticated remote code execution; limited exploitation has already been observed.
On 29 January 2026, Ivanti patched CVE-2026-1281 and CVE-2026-1340, two code injection vulnerabilities (both CVSS 9.8) in Endpoint Manager Mobile that allow unauthenticated remote code execution. CERT-EU reports one of the flaws was exploited in a limited number of cases. Affected versions include EPMM 12.5.1.0, 12.6.1.0 and 12.7.0.0 and prior; the permanent fix is planned for release 12.8.0.0 in Q1 2026.
72
Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast
60
60
August 2020 Patch Tuesday: Microsoft fixes two vulnerabilities under attack
60
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero
60
60
60
Experts plans to release VMware vRealize Log RCE exploit
60
60
Cisco re-patches wormable Jabber RCE flaw
60
60
60
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs
60
60
Week in review: Apache Struts vulnerability exploit attempt, EOL Sophos firewalls get hotfix
60
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0
60
60
60
Answering Log4Shell
60
60
Operation Triangulation: The last (hardware) mystery
60