Firewalls & VPN
CVE-2026-83548: SonicWall SMA1000 pre-authentication SSRF and proxy bypass
An unintended SMA1000 WorkPlace proxy path can expose sensitive functionality without authentication. Install SonicWall's supported hotfix, preserve exposure history, and obtain a support-led indicator review rather than treating the update as proof of recovery.
CVE-2026-8452: NetScaler memory-bounds flaw can cause denial of service
NetScaler memory-boundary failures can interrupt ADC or Gateway service. Match the appliance edition, configuration and build to the fixed release; this CVE does not establish authentication bypass or code execution.
CVE-2026-33824: Windows IKEv2 remote code execution
An unauthenticated attacker can send crafted packets to IKEv2-enabled Windows systems and potentially execute code. CISA lists exploitation; match the Windows update branch and assess VPN disruption before applying the documented network restrictions.
CVE-2026-20349: Cisco ASA and FTD remote-access VPN denial of service
Affected Cisco ASA and FTD remote-access listeners can let unauthenticated attackers trigger a reload. Check SSL VPN, IKEv2 and ZTNA configuration, then install the branch-specific hardening release to address the service-disruption risk.
CVE-2026-20316: Cisco FMC static credential is exploited and ransomware-linked
A hard-coded FMC password can expose sensitive data through a low-privileged account. Restrict management access, install Cisco's current hardening release, and review indicators; the initial access is not itself root access.
CVE-2026-20079: Cisco FMC unauthenticated authentication bypass to root
Cisco FMC authentication bypass can give unauthenticated attackers root access. Restrict management exposure, preserve evidence, and follow release-specific hardening and compromise assessment; patching alone does not resolve an existing intrusion.
CVE-2026-19490: NetScaler Gateway and AAA authentication bypass
NetScaler appliances configured as Gateway or AAA virtual servers can permit unauthenticated access. Check the exact edition and build, upgrade affected customer-managed instances, and preserve evidence for the separate compromise review.
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
CISA lists a packet-triggered buffer overflow affecting FortiOS, FortiSwitchManager and FortiSASE as exploited. Inventory the products separately; this notice does not provide a verified fixed-release matrix, so remediation requires Fortinet's product-specific guidance.
Check Point Confirms Active Exploitation of VPN RCE CVE-2026-85102
Check Point reports active exploitation of a pre-authentication VPN certificate-handling flaw. Match Security Gateway or Spark builds to the supported fix, preserve logs, and investigate suspicious Mobile Access logins separately from patch installation.
Palo Alto Updates GlobalProtect CVE-2026-0307 Fixed Builds
Palo Alto revises GlobalProtect CVE-2026-0307 fixed builds. Update both clients and infrastructure, validate the paired fix, and retain evidence.