Comparing 27 September 2026 with the previous day 26 September 2026.
The inclusion in the CISA KEV catalog proves real-world exploitation and thus more than a pure patch reminder: exposed SharePoint instances are at acute risk regardless of patch status.
The report does not contain specific CVE IDs or details on affected versions, which complicates prioritization.
The report summarizes three different vulnerabilities in Synology NAS that could allow arbitrary data to be read, without providing CVE details or indications of active exploitation.
The report remains generic and does not name any CVE IDs or specific kernel versions, so no prioritized patch planning is possible.
The report lacks CVE IDs and exploitation details, so it provides no new strategic or tactical information beyond a general browser update.
No changes in this category.
No changes in this category.
CISA confirms active exploitation: the SharePoint RCE CVE-2026-65660 is being attacked in the wild, and the RouterOS flaw CVE-2026-67279 is chained with CVE-2026-86060 into the 'MikroTrick' exploit chain that yields full unauthenticated access.
The case shows that the Cyclops Blink infrastructure disrupted by the FBI in 2022 is not dead: a Russian military APT combines multiple Cisco flaws to plant an upgraded botnet variant on exposed edge devices.
The vulnerability requires local access; exploitation assumes an already compromised system or malicious local user.
The vulnerability requires local access and allows privilege escalation; exploitation requires already compromised access.
Unlike third-party vulnerable drivers, BTR.sys is a built-in Windows component and is therefore not covered by the Microsoft Vulnerable Driver Blocklist, making it a living-off-the-land driver for attackers with administrative rights.
The update does not list specific CVE IDs but summarizes multiple vulnerabilities in both browsers.
The report summarizes multiple unspecified Linux kernel vulnerabilities that can lead to DoS and memory leaks, without concrete CVE or patch details.