Advisories 7 October 2026

Ninja Forms and WPC Product Bundles Flaws Being Used to Plant Backdoors on WordPress Sites (CVE-2026-94504 / CVE-2026-93836)

Scope: Ninja Forms WordPress plugin versions 3.15.3 and earlier, and WPC Product Bundles f

Advisories 7 October 2026
Atlassian Patches Unauthenticated File Access Flaw Across Eight Data Center Products (CVE-2026-21589)

Scope: Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crow

Advisories 6 October 2026
Rejetto HFS Weak Session Key Flaw Lets Attackers Forge Admin Sessions and Run Code, Scanning Has Started (CVE-2026-61500)

Scope: Rejetto HTTP File Server (HFS) versions 3.0.0 through 3.2.0

Advisories 6 October 2026
TeamViewer Patches Five Flaws Including a Remote Access Control Bypass That Can Lead to Code Execution (CVE-2026-92370 and Others)

Scope: TeamViewer Full Client and Host for Windows, Linux, and macOS, versions before 15.8

Advisories 6 October 2026
Citrix NetScaler Gets Another Exploited Zero-Day, and Last Week's Patches Do Not Cover It (CVE-2026-88779)

Scope: Citrix NetScaler ADC and NetScaler Gateway appliances using SAML authentication wit

Advisories 5 October 2026
MikroTik RouterOS Pre-Authentication Integer Underflow Allows Root Code Execution With a Single Request (CVE-2026-84411)

Scope: MikroTik RouterOS versions earlier than 7.24

Advisories 5 October 2026
Dell Container Storage Modules Flaws Expose Storage Admin Credentials Without Any Login (CVE-2026-63688 / CVE-2026-63692)

Scope: Dell Container Storage Modules (CSM) prior to version 1.17.0, including CSM Authori

Subscribe to Advisories