Topic

Zero Day

4 articles

Latest developments & archive

FortiMail CVE-2026-104286 Is Under Attack While Fixed Builds Remain Pending

FortiMail CVE-2026-104286 is actively exploited. Fixed builds remain pending, requiring containment and compromise checks.

October 4, 2026·4 min read

—

Security

F5 BIG-IP APM: Exploited OAuth RCE Hits Specific Configurations

CVE-2026-94127 enables unauthenticated RCE in APM systems with an access policy and OAuth authorisation-server profile.

September 23, 2026·2 min read

—

Security

Microsoft Patch Tuesday: Two Exploited Windows Flaws Matter More Than the Record Count

Microsoft patches two actively exploited Windows flaws. Both can let local attackers reach SYSTEM privileges.

September 9, 2026·4 min read

—

Security

Chrome Zero-Day CVE-2026-85046: Golem's Warning Is Valid — But the Sandbox Caveat Still Matters

Google confirms an actively exploited V8 zero-day. Golem gets the core warning right, but 'one wrong click is enough' can sound like an automatic full-system compromise — the public evidence first establishes code execution in the browser context.

September 6, 2026·5 min read

—