Vulnerability Management

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it

Conor McCormick

Patch Tuesday - September 2026

CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Patch Tuesday - August 2026

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

Patch Tuesday - July 2026

Beyond the Score: Using AI to Translate CVEs into Real-World Business Risk

Patch Tuesday - June 2026

Patch Tuesday - May 2026

Project Glasswing and the Next Challenge for Defenders: Turning Faster Discovery into Faster Action

Patch Tuesday - April 2026

Negotiating with the Board: Translating Active Risk into Financial Exposure

Trevor Christiansen

Patch Tuesday - March 2026