PEERSTITCH Memory-Resident Implant Deployed via Chained FortiManager and FortiOS Flaws, Federal Deadline Today (CVE-2025-61624)

Scope: Fortinet FortiOS and FortiManager, devices previously exposed to the FortiJump vulnerability (CVE-2024-47575)

Severity: Red

Read More

Palo Alto Networks Patches Exploited PAN-OS Management Interface RCE (CVE-2026-0322)

Scope: PAN-OS (Cloud NGFW and Prisma Access not affected)

Severity: Amber

Read More

Cisco Secure Email Gateway’s Second Zero-Day in a Month Allows Unauthenticated File Write (CVE-2026-76519)

Scope: Cisco Secure Email Gateway and Secure Email and Web Manager, instances with File Reputation enabled and Content Scanner Tools earlier than 25.3.0.5525

Severity: Red

Read More

Ivanti Connect Secure Zero-Day Chain Gives Attackers Unauthenticated Root Access Since October 1 (CVE-2026-104935)

Scope: Ivanti Connect Secure (ICS) remote access gateway appliances

Severity: Red

Read More

SAP Patches Maximum Severity OAuth2 SSRF in Cloud SDK for Python (CVE-2026-89111)

Scope: SAP Cloud SDK for Python, multi-tenant SAP BTP applications

Severity: Red

Read More

Atlassian Scanner Now Available to Check Exposure to Last Week’s Critical File Access Flaw (CVE-2026-21589)

Scope: Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, FishEye, and Crucible

Severity: Red

Read More