#Patch Now
All CosmicBytez Labs articles tagged #Patch Now, across news, security advisories, how-to guides, and projects.
- News
F5, Juniper Networks Patch Critical Vulnerabilities
F5 fixed critical NGINX flaws as Juniper patched 150+ Junos OS bugs, including CVSS 9.8 flaws enabling root-level RCE and device takeover.
- News
Critical GitLab GraphQL Flaw Lets Unauthenticated Attackers Delete Public Projects
CVE-2026-19478 (CVSS 9.4) lets unauthenticated attackers delete public GitLab projects via GraphQL. Self-managed CE/EE must patch to 19.2.4 immediately.
- News
Forminator WordPress Plugin Flaw Enables Unauthenticated RCE via PHP Upload
CVE-2026-15748 (CVSS 9.8) in Forminator Forms allows unauthenticated PHP webshell uploads for full RCE on 600,000+ WordPress sites. Patch to 1.56.2 now.
- News
Critical Palo Alto VPN Bug Now Exploited by Qilin Ransomware Gang
The Qilin ransomware gang is actively exploiting a critical PAN-OS GlobalProtect authentication bypass vulnerability to breach enterprise networks,...
- News
Update Now: 7-Zip Fixes RCE Flaw Exploitable with Malicious Archives
7-Zip 26.02 patches a remote code execution vulnerability that lets attackers execute arbitrary code by convincing users to open specially crafted...
- News
WordPress Core "wp2shell" RCE Flaws Get Public Exploits — Patch Now
Public exploits have been released for the critical wp2shell remote code execution vulnerabilities in WordPress Core, putting millions of sites at...
- News
CISA Orders Immediate Patching of Actively Exploited Fortinet FortiSandbox Flaws
CISA added two critical Fortinet FortiSandbox OS command injection vulnerabilities to its KEV catalog and gave federal agencies just three days to patch,...
- News
Progress Confirms ShareFile Zero-Day Flaw Behind Storage Zone Shutdown
Progress Software has confirmed a high-severity path traversal zero-day vulnerability in ShareFile Storage Zone Controller triggered the emergency...
- News
SonicWall Warns of SMA1000 Flaws Exploited in Zero-Day Attacks, Patch Now
SonicWall has issued an urgent advisory warning that two vulnerabilities in its SMA 1000 series secure remote access appliances are being actively...
- News
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
CISA has added a high-severity Microsoft SharePoint Server remote code execution vulnerability to its Known Exploited Vulnerabilities catalog following...
- News
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites
Drupal has released emergency security updates for CVE-2026-9082, a highly critical vulnerability in Drupal Core that allows remote code execution,...
- News
New Critical Exim Mailer Flaw Allows Remote Code Execution
A critical vulnerability in certain configurations of the Exim open-source mail transfer agent allows unauthenticated remote attackers to execute...
- News
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
Exim has released security updates to patch a severe vulnerability affecting GnuTLS-compiled builds of the world's most widely deployed mail transfer...
- News
Fortinet Warns of Critical RCE Flaws in FortiSandbox and FortiAuthenticator
Fortinet has released emergency security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could enable attackers to...
- News
CISA Flags Apache ActiveMQ Flaw as Actively Exploited in Attacks
CISA has added a high-severity Apache ActiveMQ vulnerability to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the...
- News
Over 14,000 F5 BIG-IP APM Instances Still Exposed to RCE
Internet security watchdog Shadowserver has found over 14,000 BIG-IP APM instances exposed online amid ongoing attacks exploiting a critical-severity...
- News
Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks
Hackers are actively exploiting a critical memory overread vulnerability tracked as CVE-2026-3055 in Citrix NetScaler ADC and NetScaler Gateway appliances...
- News
Critical Fortinet FortiClient EMS Flaw Now Exploited in Attacks
Threat intelligence firm Defused confirms active in-the-wild exploitation of a critical vulnerability in Fortinet's FortiClient EMS platform....