VulnHub

N-able has released a patch for a serious zero-day vulnerability in its N-central software, which is used for remote monitoring and management. Administrators are being urged to review their systems for any unfamiliar user accounts that may have been created due to this vulnerability. This issue is particularly concerning because it could allow unauthorized access to sensitive data or systems. It's crucial for organizations using N-central to apply the patch promptly to safeguard their environments against potential exploitation. Ignoring this could lead to significant security risks, including data breaches and loss of control over networked devices.

In September 2026, a significant cybersecurity update revealed two zero-day vulnerabilities that are currently being exploited, along with 113 other critical vulnerabilities among a total of 972 Common Vulnerabilities and Exposures (CVEs). The affected products span various platforms, and the presence of the zero-day exploits means that attackers are actively taking advantage of these security gaps. This situation poses serious risks for organizations and users, as unpatched systems may be susceptible to breaches and data theft. Companies are urged to prioritize updates and patch their systems promptly to mitigate potential attacks. The urgency is heightened by the fact that these vulnerabilities are already in the wild, making it crucial for users to stay informed and proactive about their cybersecurity measures.

ConnectWise has confirmed a vulnerability in its ScreenConnect Remote Access platform, affecting both its cloud and on-premise deployments. The flaw relates to file transfer capabilities, which attackers are exploiting to spread malware. This issue poses a significant risk to IT departments and managed service providers who rely on ScreenConnect for remote support. ConnectWise plans to issue a CVE identifier and an official fix within the week, but users should be aware of the potential for active exploitation in the meantime. Organizations using ScreenConnect need to monitor for any unusual activity and prepare for the forthcoming patch to secure their systems.

N-able has issued an urgent hotfix for a serious remote code execution vulnerability in its N-central remote monitoring and management platform. This flaw allows attackers to execute arbitrary code on affected systems, posing a significant risk to users of the platform. The company has warned that this vulnerability is actively being exploited in the wild, making immediate action essential for those using the software. Users need to apply the emergency patch as soon as possible to protect their systems from potential breaches. This situation underscores the ongoing challenges in cybersecurity, particularly for remote management tools that are crucial for IT operations.

A serious vulnerability in MikroTik routers has been discovered, specifically affecting those with SSH exposed to the internet. This zero-day exploit, known as the MikroTrick chain, has been actively exploited since September 2, 2023. Experts recommend that anyone using MikroTik routers immediately update their systems to patched versions: 7.24.2, 7.23.5, or 6.49.21. Additionally, users should check their logs for any signs of unauthorized access. Until verified, users should consider their routers compromised, highlighting the urgent need for vigilance among MikroTik router users to protect their networks.

Anthropic has locked users out of their Claude accounts after attackers compromised login sessions using infostealer malware. This incident raises concerns about the security of user credentials and the potential for unauthorized access to sensitive information. While the company is taking steps to protect users by enforcing account locks, it highlights the risks associated with infostealer malware that targets login information. Users may need to reset their passwords and monitor their accounts for any suspicious activity. This situation serves as a reminder for individuals to be vigilant about their online security practices.

Google has released a patch for several vulnerabilities in its Chrome browser, including a serious zero-day flaw identified as CVE-2026-85046, which is currently being exploited by attackers. The company confirmed that exploits for this vulnerability are circulating in the wild, prompting the urgent update. Users on Windows, macOS, and Linux should ensure they are running the latest version, which includes Chrome 152.0.7977.82/.83 for Windows and macOS, and Chrome 152.0.7977.82 for Linux. Keeping browsers up to date is crucial to mitigate risks from such vulnerabilities, which could allow attackers to gain unauthorized access or execute malicious code. This incident serves as a reminder of the importance of regular software updates to protect against emerging threats.

VMware has released updates for its Workstation and Fusion products to address a serious vulnerability that could be exploited by attackers with administrative access to a virtual machine. This flaw allows them to execute code on the host system, which poses a significant risk to users and organizations relying on these virtualization tools. The vulnerability underscores the necessity of keeping software up to date, especially in environments where virtual machines are used extensively. Users are strongly advised to apply the latest patches to safeguard their systems from potential attacks. Without these updates, systems could be left vulnerable to exploitation, compromising the security and integrity of the host environment.

Google has rolled out a security update to address 12 vulnerabilities in Chrome, including a high-severity flaw tracked as CVE-2026-85046. This vulnerability, identified as a type confusion bug in V8, the JavaScript and WebAssembly engine used by Chrome, has been actively exploited in the wild. Users of Chrome versions prior to 152.0.7977.82 are particularly at risk, as this flaw could allow attackers to execute malicious code remotely. This situation underscores the urgent need for users to update their browsers to the latest version to protect against potential attacks. Keeping software up to date is crucial in safeguarding against emerging threats.

In August 2026, the Patch Tuesday event resulted in a staggering 398 resolved vulnerabilities (CVEs), marking it as the second-largest patch release in history. Of these, 42 were classified as critical, while 355 were important, and one was deemed moderate. Despite the significant number of patches, only one vulnerability was confirmed to be actively exploited in the wild, with two others disclosed publicly before the patches were released. This trend indicates a growing challenge for organizations to keep their systems secure amidst an increasing volume of patches. Companies need to prioritize these updates to protect against potential exploitation of the vulnerabilities that remain unpatched.

Plex has alerted its users to update their desktop clients and media servers due to several identified security vulnerabilities. These flaws could potentially allow attackers to exploit the software, putting user data at risk. The company emphasizes the urgency of the update, as failure to patch could leave systems vulnerable to unauthorized access. Users of Plex should prioritize this update to ensure their media servers and clients are secure. It's a critical reminder of the importance of keeping software up to date to protect personal information and maintain security.

CISA has recently added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating that these flaws are currently being actively exploited by cybercriminals. The vulnerabilities include SQL Injection in Sangoma Switchvox (CVE-2026-9586), HTTP Request/Response Smuggling in Kludex Starlette (CVE-2026-48710), and OS Command Injection in Kestra OSS (CVE-2026-49869), among others. These vulnerabilities pose significant risks, particularly to federal agencies, as they could allow attackers to gain full control of affected systems. CISA's Binding Operational Directive 26-04 urges federal agencies to prioritize the rapid remediation of these high-risk vulnerabilities, but CISA also encourages all organizations to adopt a similar risk-based approach. Organizations are advised to monitor the KEV Catalog for updates and to submit any known exploited vulnerabilities not currently listed for consideration.