Cyber security
Unpatched NetScaler RCE zero-days force weekend shutdowns
With no fix available for two exploited Citrix NetScaler RCE zero-days, operators must isolate or shut down appliances before Monday.
#zero-day
4 stories tagged zero-day.
Cyber security
Cisco Secure Email Gateway zero-day grants root via email
CISA confirmed active exploitation of CVE-2026-76461, a root-level SQL injection in Cisco Secure Email Gateway, and set a 3-day patch deadline.
Cyber security
PaperCut zero-days hit CISA KEV as data theft attacks spread
PaperCut NG/MF zero-day chain CVE-2026-81578 and CVE-2026-82078 enables pre-auth RCE on print servers. CISA added both to KEV with a September 14 patch deadline.
Cyber security
Two SonicWall SMA 1000 zero-days under active attack
Two SonicWall SMA 1000 zero-day vulnerabilities including a CVSS 10.0 SSRF are under active exploitation. CISA KEV-listed with a July 17 patch deadline.