Advertisement
April 2026 Patch Tuesday: SharePoint Zero-Day, BlueHammer, & Adobe RCE
Microsoft's April 2026 Patch Tuesday addresses 167 vulnerabilities, including a SharePoint Server zero-day, Windows Defender 'BlueHammer' flaw, and an actively exploited
CISA KEV Catalog Update: Microsoft Office RCE and SharePoint Exploited
CISA adds CVE-2009-0238 (Microsoft Office RCE) and CVE-2026-32201 (SharePoint Server input validation) to its Known Exploited Vulnerabilities Catalog. All organizations
Adobe Patches Critical ColdFusion and InDesign RCE Vulnerabilities
Adobe's September 2024 update addresses 55 vulnerabilities, including critical RCE in ColdFusion and InDesign. Patching is required to prevent system takeover.
CVE-2024-22257: Critical SAP AS ABAP Code Injection — Patch Now
SAP releases patches for 19 vulnerabilities, including a CVSS 9.8 code injection flaw in SAP AS ABAP and high-severity RCE in SAP Business Client.
CVE-2025-0520: ShowDoc RCE via File Upload Flaw Under Active Attack
Critical CVE-2025-0520 in ShowDoc allows RCE via unrestricted file upload. Attackers are actively targeting unpatched servers to deploy web shells.
CVE-2026-34621: Adobe Acrobat and Reader Zero-Day Emergency Patch
Adobe issues an emergency fix for CVE-2026-34621, a critical Acrobat and Reader zero-day exploited in the wild. Learn technical details and mitigation steps.
Marimo RCE via CVE-2024-52271 — Active Exploitation Mitigation Guide
Critical pre-auth RCE vulnerability in Marimo (CVE-2024-52271) is under active exploitation for credential theft. Update to version 0.9.11 immediately.
CVE-2026-34621: Adobe Reader Zero-Day Exploited for Months Patched
Adobe releases critical updates for CVE-2026-34621, an Acrobat and Reader zero-day used for remote code execution. Patch immediately to prevent exploitation.
Adobe Acrobat Reader RCE via CVE-2026-34621 - Patch Now
Adobe issues emergency patches for CVE-2026-34621 in Acrobat Reader. This critical vulnerability is under active exploitation, allowing remote code execution.
Juniper Junos OS: Critical RCE Vulnerability & Dozens of Patches
Juniper Networks released patches for dozens of Junos OS vulnerabilities, including a critical RCE that allows unauthenticated remote device takeover. Update immediately.
CVE-2024-21825: How Attackers Exploit Orthanc DICOM Servers — Patch Now
Critical vulnerabilities in the Orthanc DICOM server, including CVE-2024-21825, could lead to RCE and DoS. Learn how to patch and protect medical imaging systems.
Apache ActiveMQ Classic RCE via Jolokia API: Patch Now
An unauthenticated Remote Code Execution flaw, present for 13 years, impacts Apache ActiveMQ Classic, allowing full system compromise. Immediate patching is critical.