Cyber Security News

Cyber Security Advisories – MS-ISAC

• A Vulnerability in F5 BIG-IP Access Policy Manager Could Allow for Remote Code Execution 2026-09-23
  A vulnerability has been discovered in F5 BIG-IP Access Policy Manager (APM) that could allow for remote code execution. BIG-IP APM is a widely deployed network access and identity management solution used across government agencies, financial institutions, healthcare organizations, and large enterprises to control application and network access. Successful exploitation of this vulnerability could result […]
• Multiple Vulnerabilities in Oracle Products Could Allow for Arbitrary Code Execution 2026-09-17
  Multiple vulnerabilities have been discovered in Oracle products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; […]
• Multiple Vulnerabilities in Cisco Secure Email Products Could Allow for Remote Code Execution 2026-09-15
  Multiple vulnerabilities have been discovered in Cisco Secure Email products, the most severe of which could allow for remote code execution.Cisco Secure Email Gateway (formerly ESA) is an email security appliance that filters spam, malware, and other threats at the mail gateway.Cisco Secure Email and Web Manager (formerly SMA) is a centralized management and reporting […]
• Multiple Vulnerabilities in Mikrotik Routers Could Allow for Admin Hijacking 2026-09-14
  Multiple vulnerabilities have been discovered in MikroTik Routers, the most severe of which could allow for admin hijacking. MikroTik routers are network devices that use the RouterOS operating system to provide advanced routing, firewall, wireless, VPN, bandwidth management, and network security features for homes, businesses, and internet service providers. Successful exploitation of the most severe […]
• A Vulnerability in GitLab Could Allow for Disclosure of Sensitive Data 2026-09-14
  A vulnerability has been discovered in GitLab, which could allow disclosure of sensitive data. GitLab GitLab is a DevOps platform that provides source code management, CI/CD pipelines, issue tracking, and collaboration tools in a single application for software development teams. Successful exploitation of this vulnerability could allow for path traversal, leading to disclosure of potentially […]
• Multiple Vulnerabilities in Ivanti Products Could Allow for Arbitrary Code Execution 2026-09-10
  Multiple vulnerabilities have been discovered in Ivanti products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the system.Ivanti Endpoint Manager Mobile (Ivanti EPMM) is a mobile management software engine that enables mobile device, […]
• A Vulnerability in SAP Extended Passport (EPP) Processing Could Allow for Remote Code Execution 2026-09-09
  A vulnerability has been discovered in SAP Extended Passport (EPP) Processing that could allow for remote code execution. SAP Extended Passport (EPP) Processing is a core system data structure and tracing mechanism within SAP Kernel code used to track, log, and monitor end-to-end communication across distributed SAP and non-SAP landscapes. It is created automatically when […]
• Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution 2026-09-08
  Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution.Adobe Experience Manager (AEM) is an enterprise-grade digital experience platform that combines content management, digital asset management, and digital enrollment into a single cloud-native solution.Adobe ColdFusion is a commercial rapid web application development platform used to build, […]
• Critical Patches Issued for Microsoft Products, September 8, 2026 2026-09-08
  Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; […]
• Multiple Vulnerabilities in DellSecure Connect Gateway Could Allow for Arbitrary Code Execution 2026-09-07
  Multiple vulnerabilities have been discovered in Dell Secure Connect Gateway, the most severe of which could allow for arbitrary code execution. Dell Secure Connect Gateway is an enterprise monitoring and connection software for Dell infrastructure. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the […]