September 2026
CVE-2019-1068: SQL Server remote code execution
An authenticated attacker can use a crafted SQL query to execute code as the SQL Server Database Engine service account. Match the service pack and GDR or CU branch; CISA now lists the flaw as exploited.
CVE-2026-8452: NetScaler memory-bounds flaw can cause denial of service
NetScaler memory-boundary failures can interrupt ADC or Gateway service. Match the appliance edition, configuration and build to the fixed release; this CVE does not establish authentication bypass or code execution.
CVE-2026-83548: SonicWall SMA1000 pre-authentication SSRF and proxy bypass
An unintended SMA1000 WorkPlace proxy path can expose sensitive functionality without authentication. Install SonicWall's supported hotfix, preserve exposure history, and obtain a support-led indicator review rather than treating the update as proof of recovery.
CVE-2026-83549: SonicWall SMA1000 administrator command injection and RCE
SonicWall SMA1000 administrators can exploit command injection through the Appliance Management Console. Apply the supported hotfix and request a support-led compromise review; this is distinct from the separate unauthenticated WorkPlace flaw.
CVE-2026-81963: Windows Update Stack privilege escalation to SYSTEM
An exploited Windows Update Stack flaw can elevate a local attacker to SYSTEM. Match the Windows release to its verified KB and build, then investigate suspicious endpoint activity separately from confirming the update.
CVE-2026-85880: Windows ALPC local privilege escalation
This exploited Windows ALPC flaw lets code in a low-privilege AppContainer escape to SYSTEM. Match the host's release and architecture to its security update; patch completion does not exclude earlier endpoint compromise.
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
CISA lists a packet-triggered buffer overflow affecting FortiOS, FortiSwitchManager and FortiSASE as exploited. Inventory the products separately; this notice does not provide a verified fixed-release matrix, so remediation requires Fortinet's product-specific guidance.
CVE-2026-19490: NetScaler Gateway and AAA authentication bypass
NetScaler appliances configured as Gateway or AAA virtual servers can permit unauthenticated access. Check the exact edition and build, upgrade affected customer-managed instances, and preserve evidence for the separate compromise review.
CVE-2026-20079: Cisco FMC unauthenticated authentication bypass to root
Cisco FMC authentication bypass can give unauthenticated attackers root access. Restrict management exposure, preserve evidence, and follow release-specific hardening and compromise assessment; patching alone does not resolve an existing intrusion.
CVE-2026-67277: MikroTik RouterOS btest unauthenticated memory disclosure and denial of service
Missing authentication in RouterOS btest can disclose kernel memory or interrupt service. Check the service and release, then install the supported fix; restricting SSH alone does not establish that this btest flaw is resolved.