Topic tag
7 articles tagged patch management. Browse the full archive or jump to all posts.
patch management
October 4, 2026 · 9 min read
CISA put FortiMail's unauthenticated 9.8 file write into KEV on 1 October. An exposed, forgotten mail gateway is a weekend job now.
OpenBao shipped a critical Vault RCE fix on 23 September. HashiCorp Vault has not. What changed, what did not, and the order to rotate secrets in.
September 27, 2026 · 11 min read
CVE-2026-94127 is a heap overflow in BIG-IP APM that you can reach unauthenticated from the data plane. F5 shipped engineering hotfixes on 22 September and CISA gave US federal agencies three days. The only question that matters for your estate is whether you run APM as an OAuth Authorization Server.
September 20, 2026 · 13 min read
CISA added three Linux kernel flaws to its known-exploited catalog on 18 September 2026. Four public local-root exploits landed the same day.
September 20, 2026 · 11 min read
SolarWinds patched a CVSS 8.8 unauthenticated RCE in Access Rights Manager on 17 September 2026, caused by a hard-coded key shipped in the product.
August 8, 2026 · 8 min read
Metabase disclosed a critical, actively exploited SQL injection zero-day on 7 August. Patch your self-hosted instance and check for compromise this week.
August 8, 2026 · 11 min read
A new CPU side-channel called TONTOU bypasses the Spectre v2 mitigations we have been running since 2018, enough to leak Linux password hashes.
