Week 36, 2026

Severity mix (104 articles)

• CRITICAL 18
• HIGH 30
• MEDIUM 14
• LOW 3
• INFO 39

Top stories

1. CRITICAL

   MikroTik RouterOS Unauthenticated SSH Exploit: Critical Advisory

   Sep 6, 2026

2. CRITICAL

   Zero-Day Exploitation: StyleSmuggler RCE in Magento, Adobe Commerce

   Sep 6, 2026

3. CRITICAL

   CVE-2026-63077: JetBrains Cadence Breach Exposes Credentials

   Sep 5, 2026

4. CRITICAL

   SonicWall SMA 1000 Zero-Days: Unauthenticated RCE Explained

   Sep 5, 2026

5. CRITICAL

   CVE-2026-19490: Citrix NetScaler Auth Bypass Under Attack

   Sep 5, 2026

6. CRITICAL

   Chrome Zero-Day CVE-2026-85046 Actively Exploited: Patch Now

   Sep 4, 2026

7. CRITICAL

   WordPress RCE Exploited via CVE-2026-14894 & CVE-2026-32475

   Sep 4, 2026

8. CRITICAL

   CVE-2026-73749: HPE ArubaOS-CX RCE Flaw Patched

   Sep 3, 2026

9. CRITICAL

   CVE-2026-83548: SonicWall SMA1000 SSRF Under Active Exploitation

   Sep 2, 2026

10. CRITICAL

    CVE-2026-9586: Sangoma Switchvox RCE via SQL Injection

    Sep 2, 2026

+ 94 more in the archive.

CVEs tracked this week (26)

• CVE-2021-23758
• CVE-2021-31886
• CVE-2023-49105
• CVE-2025-0994
• CVE-2026-14894
• CVE-2026-19490
• CVE-2026-20212
• CVE-2026-20274
• CVE-2026-20279
• CVE-2026-32475
• CVE-2026-48710
• CVE-2026-49869
• CVE-2026-53362
• CVE-2026-59346
• CVE-2026-59347
• CVE-2026-59822
• CVE-2026-62911
• CVE-2026-63077
• CVE-2026-6471
• CVE-2026-66384
• CVE-2026-73749
• CVE-2026-82078
• CVE-2026-82329
• CVE-2026-84115
• CVE-2026-85046
• CVE-2026-9586