Oracle Releases October 2026 Critical Patch Update With 109 PeopleSoft Fixes Alone

Scope: Oracle Database, E-Business Suite, PeopleSoft, Oracle Communications, Oracle Analytics, Oracle Systems, and other Oracle product lines

Severity: Red

Read More

PEERSTITCH Memory-Resident Implant Deployed via Chained FortiManager and FortiOS Flaws, Federal Deadline Today (CVE-2025-61624)

Scope: Fortinet FortiOS and FortiManager, devices previously exposed to the FortiJump vulnerability (CVE-2024-47575)

Severity: Red

Read More

SiteGuard WAF Command Injection Under Active Exploitation Grants Root and SYSTEM Access (CVE-2026-106931)

Scope: SiteGuard Server Edition Web Application Firewall, host-based instances with the statistics function enabled

Severity: Red

Read More

China-Nexus Group Exploited BeyondTrust Remote Support Zero-Day Since 2023, Federal Deadline Today (CVE-2026-102764)

Scope: BeyondTrust Remote Support (formerly Bomgar), self-hosted appliances (SaaS customers already patched as of October 9)

Severity: Red

Read More

Ivanti Connect Secure Zero-Day Chain Gives Attackers Unauthenticated Root Access Since October 1 (CVE-2026-104935)

Scope: Ivanti Connect Secure (ICS) remote access gateway appliances

Severity: Red

Read More

Cisco Secure Email Gateway’s Second Zero-Day in a Month Allows Unauthenticated File Write (CVE-2026-76519)

Scope: Cisco Secure Email Gateway and Secure Email and Web Manager, instances with File Reputation enabled and Content Scanner Tools earlier than 25.3.0.5525

Severity: Red

Read More