CVE-2026-25089: FortiSandbox unauthenticated command injection added to CISA KEV

Fortinet has released security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could enable attackers to run commands or arbitrary code. [...]

The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited

<a href="https://news.ycombinator.com/item?id=48686093">Comments</a>

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities

<h1> CVE-2026-65660: a SharePoint flaw that never writes a file to disk </h1> <p>Most incident response playbooks for a web server compromise start with the file system. Analysts

<h1> Upgrading past CVE-2026-88772: version mapping and rollout order for NetScaler ADC and Gateway </h1> <p>The patching decision for the Citrix NetScaler bulletin CTX697096 of