A high-severity authentication bypass and remote code execution vulnerability in Ivanti ICS, tracked as CVE-2026-104935, was only partially fixed when Ivanti issued a patch in July. Threat actors have since exploited the remaining gap, according to reports, allowing attacks to continue despite the earlier remediation attempt.
darkreading.com
· 2026-10-14
Fortinet has disclosed a critical path traversal vulnerability in FortiMail's management interface, scoring 9.8 on CVSS, that attackers are already exploiting to write arbitrary files without authentication. The flaw affects FortiMail versions 7.2 through 8.0.1, and was discovered internally by Fortinet's Product Security team. Patches are not yet available for most affected branches, though fixed versions are planned.
bleepingcomputer.com
· 2026-10-01
GoKawiil