September 2026
CVE-2026-50751: Check Point deprecated IKEv1 VPN authentication bypass
Check Point's exploited VPN bypass requires Remote Access or Mobile Access, IKEv1, accepted legacy clients and no mandatory machine certificate. Gateway and Spark remediation differ; review suspicious VPN sessions separately from installing the appropriate fix.
CVE-2026-20245: Cisco Catalyst SD-WAN authenticated root privilege escalation
An attacker with netadmin privileges can use a crafted file to gain root on affected SD-WAN control components. Preserve admin-tech before upgrading, then inspect indicators and verify downstream edge-device configuration.
CVE-2026-7473: Arista EOS tunnel decapsulation validation flaw
Affected Arista EOS switches can forward unexpected tunnel traffic sent to a configured decapsulation IP. Arista specifies ACL mitigation, not a software upgrade; plan filters around shared-IP services and potentially disruptive TCAM changes.
CVE-2026-10520: Ivanti Sentry OS Command Injection Vulnerability
Ivanti Sentry command injection can permit unauthenticated root access when the appliance is unmanaged and vulnerable endpoints are externally reachable. Managed access controls limit exposure but do not establish a software fix; the fixed-build mapping remains unverified.
CVE-2026-20262: Cisco Catalyst SD-WAN Manager arbitrary file write
Authenticated attackers can create or overwrite files through Catalyst SD-WAN Manager path traversal. Preserve admin-tech and upload logs, install the branch-specific fix, and involve Cisco TAC when suspicious uploads or other indicators appear.
CVE-2025-67038: Lantronix EDS5000 Code Injection Vulnerability
Lantronix EDS5000 username-parameter injection can run commands as root. Record the model, hardware revision and firmware; available release notes describe upgrade constraints but do not establish a CVE-specific fixed build.
CVE-2026-34908: UniFi OS improper access control allows unauthorized system changes
UniFi OS access-control failures can allow unauthorized system changes from the network. Update the affected console or server and review its state and access logs; installing the fix does not reverse earlier changes.
CVE-2026-34909: UniFi OS path traversal
UniFi OS path traversal can expose underlying files to an attacker with network access. Apply the product-specific update and preserve access logs; the reviewed scope does not establish arbitrary file upload or placement.
CVE-2026-34910: UniFi OS input-validation flaw
UniFi OS input-validation failures can permit command injection from an attacker with network access. Match the exact console or server product to its fixed release, then review system and access logs for unexplained activity.
CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
Unified CM and Unified CM SME systems with WebDialer enabled face unauthenticated file writes that may later enable root escalation. Check actual service state, then select Cisco's update or assess temporary disablement's workflow impact.