Vulnerabilities

critical Vulnerabilities

Weekly Cybersecurity Roundup: Zero-Days, Firewall Attacks, AI-Powered Threats and Major Data Breaches

The cybersecurity landscape remained highly active this week, with attackers targeting enterprise firewalls, operating systems, browsers, databases and cloud environments. Security teams also faced a record-scale Microsoft Patch Tuesday, multiple vulnerabilities under active exploitation, and growing evidence that artificial intelligence is being integrated directly into offensive cyber operations

Zentrya One Desk 14 Sept 2026 8 min read

critical CVE-2026-68488 Vulnerabilities

Plesk Backup Manager Flaw Lets Low-Privileged Users Gain Root Access

A newly disclosed vulnerability in Plesk Backup Manager could allow a low-privileged customer to escalate privileges and obtain full root access to a vulnerable Linux server.

Zentrya One Desk 14 Sept 2026 2 min read

critical CVE-2026-42016 and CVE-2026-42018 Vulnerabilities

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect and RouterOS Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five actively exploited vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog.

Zentrya One Desk 13 Sept 2026 3 min read

critical CVE-2026-85706 Vulnerabilities

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab has patched a maximum-severity path traversal vulnerability that can allow unauthenticated attackers to read arbitrary files from vulnerable GitLab servers.

Zentrya One Desk 13 Sept 2026 2 min read

critical CVE-2026-42018, CVE-2026-42016, CVE-2026 Vulnerabilities

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

Attackers have been actively exploiting vulnerabilities in self-hosted JFrog Artifactory deployments to obtain administrator privileges, create persistent accounts, execute commands and install backdoors, raising serious concerns for organizations that rely on Artifactory as a central component of their software supply chains.

Zentrya One Desk 12 Sept 2026 8 min read

critical CVE-2026-51990 Vulnerabilities

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

A China-linked threat actor tracked as UNC3569 has exploited a newly disclosed vulnerability in Sogou Input Method for Windows to compromise systems and deploy the GRAYRABBIT backdoor, according to research from Gen Threat Labs.

Zentrya One Desk 12 Sept 2026 8 min read

critical CVE-2026-81578 and CVE-2026-82078 Vulnerabilities

PaperCut Replaces Emergency Patches With Permanent Fixes for Two Actively Exploited Vulnerabilities

PaperCut has released new regular maintenance updates for its PaperCut NG and PaperCut MF print-management platforms, replacing the emergency patches previously issued to address two vulnerabilities that have been actively exploited in the wild.

Zentrya One Desk 12 Sept 2026 6 min read

critical CVE-2026-20316 and CVE-2026-20079 Vulnerabilities

Hackers Exploit Critical Cisco Firewall Vulnerability to Gain Root Access and Deploy Malware

Threat actors are actively exploiting a critical vulnerability in Cisco firewall software to obtain elevated privileges and deploy malicious payloads, highlighting the growing risk posed by compromised internet-facing security appliances.

Zentrya One Desk 10 Sept 2026 6 min read

CVE-2026-81578 and CVE-2026-82078 Vulnerabilities

Hundreds of AI Agents Used to Exploit PaperCut Flaws and Compromise 440 Servers Worldwide

A Russian-speaking threat actor has reportedly used hundreds of autonomous AI agents to exploit vulnerable PaperCut NG and MF servers, compromising at least 440 instances belonging to 395 organizations across 48 countries.

Zentrya One Desk 10 Sept 2026 9 min read

critical CVE-2026-85102 and CVE-2026-85103 Vulnerabilities

Check Point Discloses Two Critical 9.8-Rated VPN Flaws Allowing Unauthenticated Remote Code Execution

Check Point has disclosed two critical vulnerabilities in its Quantum security products that could allow unauthenticated remote attackers to execute arbitrary code by exploiting weaknesses in VPN certificate processing. Both flaws carry a CVSS score of 9.8.

Zentrya One Desk 10 Sept 2026 6 min read

critical CVE-2018-13379 and CVE-2023-4966 Vulnerabilities

ISA Adds Exploited Cisco, Citrix and Fortinet Flaws to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added actively exploited vulnerabilities affecting Cisco, Citrix and Fortinet products to its Known Exploited Vulnerabilities (KEV) catalog.

Zentrya One Desk 10 Sept 2026 7 min read

critical CVE-2026-85046 and CVE-2026-85880 Vulnerabilities

BlueMoon Exploit Kit Used by Four Spy Groups to Target Chrome and Windows

A previously undocumented exploit kit named BlueMoon has been linked to multiple espionage campaigns targeting Google Chrome and Microsoft Windows.

Zentrya One Desk 10 Sept 2026 7 min read