VulnHub

A vulnerability has been identified in the CareCam Pro IP Cameras, specifically affecting the ANJIA AJL33PC0801 model. This vulnerability, designated as CVE-2026-85083, arises from the use of hard-coded credentials for bootloader authentication. Attackers with physical access to the camera can exploit this weakness to gain privileged access, potentially allowing them to modify firmware and configurations, resulting in full control of the device. The issue has been noted as a medium severity threat with a CVSS score of 6.8. Users are advised to take precautions, as CareCam has not yet responded to the Cybersecurity and Infrastructure Security Agency (CISA) regarding remediation efforts.

The Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, indicating that these flaws are actively being exploited in the wild. The vulnerabilities include CVE-2026-75650 affecting Adobe Commerce and Magento, CVE-2026-81963 and CVE-2026-85880 impacting Microsoft Windows, and CVE-2026-86218 concerning N-able N-central. These vulnerabilities are particularly concerning for federal agencies, as they could allow attackers to gain total control over compromised systems. CISA's Binding Operational Directive 26-04 emphasizes the need for federal agencies to promptly address high-risk vulnerabilities, and while it specifically applies to federal entities, CISA encourages all organizations to adopt similar practices for managing and mitigating risks associated with these vulnerabilities.

Adobe has issued urgent security patches for a serious vulnerability affecting Adobe Commerce and Magento Open Source, identified as CVE-2026-75650. This flaw has a maximum severity rating of 10.0 and has been actively exploited since September 4, 2026. Known as StyleSmuggler, the vulnerability allows attackers to deploy a Rust backdoor and a PHP web shell, posing significant risks to users of these platforms. Companies running affected versions need to apply the patches promptly to protect their systems from potential breaches. Failure to address this vulnerability could lead to unauthorized access and data compromise.

In September 2026, a significant cybersecurity update revealed two zero-day vulnerabilities that are currently being exploited, along with 113 other critical vulnerabilities among a total of 972 Common Vulnerabilities and Exposures (CVEs). The affected products span various platforms, and the presence of the zero-day exploits means that attackers are actively taking advantage of these security gaps. This situation poses serious risks for organizations and users, as unpatched systems may be susceptible to breaches and data theft. Companies are urged to prioritize updates and patch their systems promptly to mitigate potential attacks. The urgency is heightened by the fact that these vulnerabilities are already in the wild, making it crucial for users to stay informed and proactive about their cybersecurity measures.

N-able has released a hotfix for a serious vulnerability identified as CVE-2026-86218, which has been rated as maximum severity by the company. This vulnerability allows remote code execution, meaning that attackers could potentially gain control of affected systems without physical access. Users of N-able's software are urged to apply the hotfix immediately to protect their systems from exploitation. The urgency of this update stems from the risk of attackers leveraging this vulnerability to compromise sensitive data and disrupt operations. Timely patching is crucial for organizations relying on N-able's products to maintain their cybersecurity posture.

N-able has issued an emergency hotfix for a serious vulnerability in its N-central remote monitoring and management solution, identified as CVE-2026-86218. This flaw allows attackers to execute remote code on the server without prior authentication, making it a critical risk for managed service providers (MSPs) that use this software. The vulnerability was actively exploited in the wild, prompting N-able to act quickly. The hotfix, designated as Hotfix 4, updates N-central from version 2026.3 to 2026.3.1.14, and it is crucial for customers operating on-premises installations to apply this update immediately to protect their systems. Failure to address this vulnerability could lead to unauthorized access and control over affected servers, posing significant risks to data integrity and security.

ConnectWise has confirmed a vulnerability in its ScreenConnect Remote Access platform, affecting both its cloud and on-premise deployments. The flaw relates to file transfer capabilities, which attackers are exploiting to spread malware. This issue poses a significant risk to IT departments and managed service providers who rely on ScreenConnect for remote support. ConnectWise plans to issue a CVE identifier and an official fix within the week, but users should be aware of the potential for active exploitation in the meantime. Organizations using ScreenConnect need to monitor for any unusual activity and prepare for the forthcoming patch to secure their systems.

Broadcom has issued security updates to address two vulnerabilities in VMware Workstation and VMware Fusion, one of which is particularly severe. This critical vulnerability, identified as CVE-2026-59346, has a CVSS score of 9.3 and involves an integer-overflow issue. If exploited by a local attacker with elevated privileges, this flaw could allow them to execute arbitrary code on the host system. This poses a significant risk to users of these virtualization products, as it could lead to unauthorized access and control over the host machine. Users are urged to apply the updates promptly to mitigate this risk.

Recent vulnerabilities in PaperCut have been exploited by attackers to steal credentials from educational institutions in the U.S. and Europe. The Arctic Wolf Adversary Research Team identified two specific vulnerabilities, CVE-2026-81578 and CVE-2026-82078, which allow for authentication bypass and remote code execution. These flaws enable attackers to execute commands and gather information within the affected systems. The impact is particularly significant for schools and universities, as they often handle sensitive student and staff information. Immediate action is essential to prevent unauthorized access and potential data breaches.

Plex has alerted its users about serious security vulnerabilities affecting its media server and desktop clients. Although specific CVE identifiers are not yet available, the company has stressed the urgency of updating to the latest versions of its software to address these risks. Users who rely on Plex for media streaming should prioritize these updates to ensure their systems remain secure. Failing to do so could leave them vulnerable to potential attacks. The communication from Plex underscores the importance of keeping software up to date in the face of emerging security threats.

Hewlett Packard Enterprise (HPE) has released critical patches to address a series of vulnerabilities in its AOS-CX networking operating system. These vulnerabilities, collectively identified as CVE-2026-73749, carry a high severity score of 9.8, indicating they could allow remote code execution. This means that attackers could potentially exploit these flaws to take control of affected systems from a distance. Organizations using AOS-CX should prioritize applying these updates to safeguard their networks. The vulnerabilities are significant as they could affect a wide range of network devices, potentially putting sensitive data and operations at risk.

Attackers are now exploiting a significant vulnerability in Citrix NetScaler, identified as CVE-2026-19490, which allows for authentication bypass. This flaw poses a severe risk as it could enable unauthorized access to systems using affected versions of NetScaler. Companies that utilize Citrix NetScaler for application delivery or networking are particularly at risk, as this vulnerability can compromise their security posture. Security researchers from Previdian have reported that the flaw is actively being exploited in the wild, indicating an urgent need for users to assess their systems. Organizations should prioritize applying any available patches or implementing mitigation strategies to protect against potential breaches.

Researchers have discovered a serious vulnerability in PostgreSQL, known as PostGREShell (CVE-2026-6471), which has been around for 12 years. This flaw allows low-privileged attackers with replication access to execute arbitrary code, potentially leading to a complete server takeover. The vulnerability has a CVSS score of 7.2 and affects PostgreSQL versions dating back to 2014. Given its long-standing existence, organizations using affected versions should take immediate action to secure their systems to prevent exploitation. The discovery emphasizes the critical need for regular security assessments and updates in database management systems.

Google has released a patch for several vulnerabilities in its Chrome browser, including a serious zero-day flaw identified as CVE-2026-85046, which is currently being exploited by attackers. The company confirmed that exploits for this vulnerability are circulating in the wild, prompting the urgent update. Users on Windows, macOS, and Linux should ensure they are running the latest version, which includes Chrome 152.0.7977.82/.83 for Windows and macOS, and Chrome 152.0.7977.82 for Linux. Keeping browsers up to date is crucial to mitigate risks from such vulnerabilities, which could allow attackers to gain unauthorized access or execute malicious code. This incident serves as a reminder of the importance of regular software updates to protect against emerging threats.