VulnHub

OpenAI has announced the deployment of its new model, GPT-6 Astra, which boasts advanced cybersecurity capabilities, including the ability to identify zero-day vulnerabilities. This model has achieved a 'Critical level' in its cybersecurity features, which raises both potential benefits and concerns. While it could aid organizations in detecting and mitigating security risks, the deployment also presents challenges in monitoring its use. This duality means that while GPT-6 Astra could enhance security measures, it may also create new avenues for misuse if not properly overseen. As AI technology continues to evolve, the implications for cybersecurity practices are significant, warranting careful consideration from security professionals.

N-able has released a patch for a serious zero-day vulnerability in its N-central software, which is used for remote monitoring and management. Administrators are being urged to review their systems for any unfamiliar user accounts that may have been created due to this vulnerability. This issue is particularly concerning because it could allow unauthorized access to sensitive data or systems. It's crucial for organizations using N-central to apply the patch promptly to safeguard their environments against potential exploitation. Ignoring this could lead to significant security risks, including data breaches and loss of control over networked devices.

Adobe has issued urgent security patches for a serious vulnerability affecting Adobe Commerce and Magento Open Source, identified as CVE-2026-75650. This flaw has a maximum severity rating of 10.0 and has been actively exploited since September 4, 2026. Known as StyleSmuggler, the vulnerability allows attackers to deploy a Rust backdoor and a PHP web shell, posing significant risks to users of these platforms. Companies running affected versions need to apply the patches promptly to protect their systems from potential breaches. Failure to address this vulnerability could lead to unauthorized access and data compromise.

In September 2026, a significant cybersecurity update revealed two zero-day vulnerabilities that are currently being exploited, along with 113 other critical vulnerabilities among a total of 972 Common Vulnerabilities and Exposures (CVEs). The affected products span various platforms, and the presence of the zero-day exploits means that attackers are actively taking advantage of these security gaps. This situation poses serious risks for organizations and users, as unpatched systems may be susceptible to breaches and data theft. Companies are urged to prioritize updates and patch their systems promptly to mitigate potential attacks. The urgency is heightened by the fact that these vulnerabilities are already in the wild, making it crucial for users to stay informed and proactive about their cybersecurity measures.

A new set of proof-of-concept exploits has been revealed, targeting vulnerabilities in CrowdStrike, Nvidia, and Avast products. These zero-day exploits allow attackers to escalate privileges, potentially granting them system-level access on affected machines. This poses a significant risk as it could enable malicious actors to execute unauthorized commands and take control of systems. Organizations using these products need to be vigilant, as the ease of exploitation could lead to widespread attacks. It's crucial for users to remain informed about these vulnerabilities and take necessary precautions to secure their systems.

N-able has issued an emergency hotfix for a serious vulnerability in its N-central remote monitoring and management solution, identified as CVE-2026-86218. This flaw allows attackers to execute remote code on the server without prior authentication, making it a critical risk for managed service providers (MSPs) that use this software. The vulnerability was actively exploited in the wild, prompting N-able to act quickly. The hotfix, designated as Hotfix 4, updates N-central from version 2026.3 to 2026.3.1.14, and it is crucial for customers operating on-premises installations to apply this update immediately to protect their systems. Failure to address this vulnerability could lead to unauthorized access and control over affected servers, posing significant risks to data integrity and security.

A security researcher has disclosed a zero-day exploit in CrowdStrike's software that could allow attackers to escalate their privileges on affected systems. This vulnerability poses a significant risk as it may enable unauthorized users to gain elevated access, potentially compromising sensitive data and systems. CrowdStrike, known for its endpoint protection solutions, is likely to be contacted by organizations using its services to assess their security posture and mitigate any risks associated with this exploit. The publication of this exploit raises concerns about the security of systems relying on CrowdStrike's technology and emphasizes the need for organizations to remain vigilant about potential vulnerabilities.

A serious vulnerability in MikroTik routers has been discovered, specifically affecting those with SSH exposed to the internet. This zero-day exploit, known as the MikroTrick chain, has been actively exploited since September 2, 2023. Experts recommend that anyone using MikroTik routers immediately update their systems to patched versions: 7.24.2, 7.23.5, or 6.49.21. Additionally, users should check their logs for any signs of unauthorized access. Until verified, users should consider their routers compromised, highlighting the urgent need for vigilance among MikroTik router users to protect their networks.

A new vulnerability in Magento Open Source and Adobe Commerce, identified by the Dutch security firm Sansec and named StyleSmuggler, is currently being exploited by attackers. This flaw allows malicious code to be executed on online store servers without requiring a login, which poses a significant risk to e-commerce platforms. Sansec reported that attacks began on September 4, 2023, just a day before the advisory was published. Online stores using these platforms are at risk of being backdoored, which can lead to unauthorized access and data breaches. Companies running affected systems need to take this threat seriously and implement necessary security measures to protect their customers and data.

Google has released a patch for several vulnerabilities in its Chrome browser, including a serious zero-day flaw identified as CVE-2026-85046, which is currently being exploited by attackers. The company confirmed that exploits for this vulnerability are circulating in the wild, prompting the urgent update. Users on Windows, macOS, and Linux should ensure they are running the latest version, which includes Chrome 152.0.7977.82/.83 for Windows and macOS, and Chrome 152.0.7977.82 for Linux. Keeping browsers up to date is crucial to mitigate risks from such vulnerabilities, which could allow attackers to gain unauthorized access or execute malicious code. This incident serves as a reminder of the importance of regular software updates to protect against emerging threats.

Google has rolled out a security update to address 12 vulnerabilities in Chrome, including a high-severity flaw tracked as CVE-2026-85046. This vulnerability, identified as a type confusion bug in V8, the JavaScript and WebAssembly engine used by Chrome, has been actively exploited in the wild. Users of Chrome versions prior to 152.0.7977.82 are particularly at risk, as this flaw could allow attackers to execute malicious code remotely. This situation underscores the urgent need for users to update their browsers to the latest version to protect against potential attacks. Keeping software up to date is crucial in safeguarding against emerging threats.

SonicWall's SMA 1000 appliances are facing significant security challenges, with attackers actively exploiting five zero-day vulnerabilities since late 2025. These vulnerabilities have put SonicWall customers at risk, as they have been under attack for years. The ongoing exploitation means that organizations using these devices need to be particularly vigilant about their security posture. This situation raises concerns about the reliability of SonicWall products and highlights the importance of prompt patching and updates to mitigate such risks. As attackers continue to target these vulnerabilities, it is crucial for affected users to stay informed and take necessary precautions.

A security researcher known as Chaotic Eclipse has revealed a new zero-day vulnerability called FalconFlank that affects CrowdStrike Falcon, a popular endpoint protection solution. This privilege escalation flaw allows attackers to exploit the way CrowdStrike handles malicious macros, potentially giving them elevated access to systems protected by the software. This vulnerability poses a significant risk to organizations using CrowdStrike Falcon, as it could enable attackers to bypass security measures and gain unauthorized control. The researcher has provided a proof of concept (PoC) on GitHub, which demonstrates how the exploit can be executed. Companies using CrowdStrike Falcon should assess their security posture and stay alert for any signs of exploitation.

Recent reports indicate that SonicWall's SMA 1000 series devices are vulnerable to multiple zero-day exploits, allowing unauthorized remote code execution (RCE). This follows a series of attacks earlier this summer that targeted two other zero-day vulnerabilities in SonicWall's edge devices. The implications of this vulnerability are significant, as it could allow attackers to gain control over affected systems without any authentication. Organizations using these devices need to take immediate action to safeguard their networks, as the vulnerabilities are being actively exploited. Users are advised to monitor for updates from SonicWall and apply patches as soon as they are released to mitigate potential risks.

SonicWall has issued security updates to fix two serious vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series VPN appliances. These flaws, identified as CVE-2026-83548 and another not specified in the article, have already been exploited in zero-day attacks. The first vulnerability, CVE-2026-83548, has a maximum severity score of 10.0 and allows attackers to execute server-side request forgery (SSRF) attacks before authentication. This means that unauthorized users could potentially access sensitive internal resources. Organizations using these VPN appliances are urged to apply the updates immediately to protect their systems from potential exploitation.