Vulnerabilities
Security news
Official advisories,
every morning.
We collect announcements from CISA (US) and the NCSC (UK) every morning at 9:00 JST and add the countermeasures we can help with. Always check the original announcement for the full details. Advisories from Japanese public bodies are on the Japanese page.
Vulnerabilities
CVE-2026-76460: Cisco Identity Services Engine — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-87886: Acronis Backup — Acronis Backup Incorrect Default Permissions Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-76461: Cisco Secure Email Gateway — Cisco Secure Email Gateway SQL Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-84869: ConnectWise ScreenConnect — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-42016: JFrog Artifactory — JFrog Artifactory Incorrect Authorization Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-42018: JFrog Artifactory — JFrog Artifactory Improper Authentication Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-85706: GitLab Community Edition and Enterprise Edition — GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-86060: MikroTik RouterOS — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-67277: MikroTik RouterOS — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-19490: Citrix NetScaler — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2025-25249: Fortinet Multiple Products — Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-87491: Google Chromium V8 — Google Chromium V8 Out of Bounds Write Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-20079: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or C
Source: CISA KEV ↗Vulnerabilities
CVE-2026-75650: Adobe Commerce and Magento — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-81963: Microsoft Windows — Microsoft Windows Link Following Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-86218: N-able N-central — N-able N-central Static Code Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities