Security Notices
CVE-2026-86060: MikroTik RouterOS MikroTrick policy-mask privilege escalation
MikroTik RouterOS policy-mask manipulation can escalate privileges. Upgrade the affected release, restrict untrusted SSH access, and inspect users, scripts and configuration even when the router does not report a Flagged state.
CVE-2026-67277: MikroTik RouterOS btest unauthenticated memory disclosure and denial of service
Missing authentication in RouterOS btest can disclose kernel memory or interrupt service. Check the service and release, then install the supported fix; restricting SSH alone does not establish that this btest flaw is resolved.
CVE-2026-20079: Cisco FMC unauthenticated authentication bypass to root
Cisco FMC authentication bypass can give unauthenticated attackers root access. Restrict management exposure, preserve evidence, and follow release-specific hardening and compromise assessment; patching alone does not resolve an existing intrusion.
CVE-2026-19490: NetScaler Gateway and AAA authentication bypass
NetScaler appliances configured as Gateway or AAA virtual servers can permit unauthenticated access. Check the exact edition and build, upgrade affected customer-managed instances, and preserve evidence for the separate compromise review.
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
CISA lists a packet-triggered buffer overflow affecting FortiOS, FortiSwitchManager and FortiSASE as exploited. Inventory the products separately; this notice does not provide a verified fixed-release matrix, so remediation requires Fortinet's product-specific guidance.
CVE-2026-85880: Windows ALPC local privilege escalation
This exploited Windows ALPC flaw lets code in a low-privilege AppContainer escape to SYSTEM. Match the host's release and architecture to its security update; patch completion does not exclude earlier endpoint compromise.
Check Point Confirms Active Exploitation of VPN RCE CVE-2026-85102
Check Point reports active exploitation of a pre-authentication VPN certificate-handling flaw. Match Security Gateway or Spark builds to the supported fix, preserve logs, and investigate suspicious Mobile Access logins separately from patch installation.
Palo Alto Updates GlobalProtect CVE-2026-0307 Fixed Builds
Palo Alto revises GlobalProtect CVE-2026-0307 fixed builds. Update both clients and infrastructure, validate the paired fix, and retain evidence.