Menu
A A A
A A A

Information Security Alerts

The following products have discovered critical security vulnerabilities recently.  These vulnerabilities could allow remote attackers to invade your devices. It is strongly recommended updating your following product versions to the latest immediately.

 

  • Active Vulnerabilities to be concerned
Product Vulnerability Publish Date
Fortinet Fortinet Security Hardening Releases for Multiple Fortinet Products [new] 22 Oct 2026
Palo Alto Palo Alto Products affected by Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) [new] 22 Oct 2026
PHP PHP Remote Code Execution Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) [new] 21 Oct 2026
Palo Alto PAN-OS Management Interface Remote Code Execution Vulnerability Exploited in the Wild (CVE-2026-0322) [new] 15 Oct 2026
Apple Apple CoreGraphics Out-of-Bounds Write Vulnerability (CVE-2026-86950) 30 Sep 2026
WordPress WordPress Local File Inclusion to Remote Code Execution Vulnerability (CVE-2026-87902) 23 Sep 2026
Microsoft Microsoft Denial-of-Service Vulnerability “BigDiskBuster” (CVE-Unknown) 22 Sep 2026
WordPress WordPress Remote Code Execution Vulnerabilities “Click2Shell” (CVE-Unknown) and “Comment2Shell” (CVE-2026-93485) 21 Sep 2026
Cisco Cisco Identity Services Engine (ISE) API Authentication Bypass Vulnerability (CVE-2026-76460) 18 Sep 2026
Fortinet Fortinet FortiPAM Improper Authentication Vulnerability (CVE-2026-84388) 10 Sep 2026
Google Chrome Google Chrome V8 Out-of-Bounds Write Zero-Day Vulnerability (CVE-2026-87491) 10 Sep 2026
Microsoft Microsoft Defender Elevation of Privilege Vulnerabilities “RoguePlanet”, “ShieldBreak” and “ShieldCrash” (CVE-2026-50656, CVE-2026-69414, CVE-Unknown) 9 Sep 2026
Google Chrome Google Chrome V8 Type Confusion Remote Code Execution Vulnerability (CVE-2026-85046) 4 Sep 2026
Log4j Log4j Remote Code Execution Flow in FilteredObjectInputStream (no CVE & Patch yet) 27 Aug 2026
Apple Apple macOS Screen Sharing Authentication Bypass Vulnerability (CVE-2026-65400) 19 Aug 2026
WordPress WordPress Remote Code Execution Vulnerability (CVE-2026-65640) 13 Aug 2026
Zoom Zoom Multiple Vulnerabilities 12 Aug 2026
Linux Linux Kernel Local Privilege Escalation and Container Escape Vulnerability “SCTPhantom” (CVE-2026-64564) 11 Aug 2026
WordPress WordPress Pre-Authenticated XSS Vulnerability “XSS2Shell” (CVE-2026-64638) 10 Aug 2026
Linux Linux Kernel XFS Local Privilege Escalation Vulnerability “RefluXFS” (CVE-2026-64600) 24 Jul 2026
WordPress WordPress Remote Code Execution Vulnerabilities “wp2shell” (CVE-2026-63030 & CVE-2026-60137) 20 Jul 2026
Linux Linux Kernel KVM Guest-to-Host Escape Vulnerability “Januscape” (CVE-2026-53359) 9 Jul 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “GhostLock” (CVE-2026-43499) 9 Jul 2026
Joomla Remote Code Execution Vulnerability in Joomla JCE Editor (CVE-2026-48907) 6 Jul 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “Bad Epoll” (CVE-2026-46242) 6 Jul 2026

 

 

 

 

 

 

 

 

 

 

 

 

  • Active Ransomware to be concerned
Ransomware Publish Date
The Gentlemen Ransomware 12 Aug 2026

 

 

  • For General Users:
Product Vulnerability Publish Date
Adobe Adobe Multiple Vulnerabilities 11 Jun 2026
Google Chrome Google Chrome Skia and V8 Vulnerabilities (CVE-2026-3909 & CVE-2026-3910 17 Mar 2026
Google Chrome Google Chromium Remote Code Execution Vulnerability (CVE-2026-2441) 20 Feb 2026
Google Chrome Google Chromium Out-of-Bounds Memory Access Vulnerability (CVE-2025-14174) 17 Dec 2025
WinRAR Zero-Day WinRAR Path Traversal Vulnerability (CVE-2025-8088) 14 Aug 2025
Google Chrome Google Chromium Out-of-Bounds Memory Access Vulnerability (CVE-2025-14174) 17 Dec 2025
  • For Technical Professionals:
Product Vulnerabilities Publish Date
Linux Linux Kernel Local Privilege Escalation Vulnerability “DirtyClone” (CVE-2026-43503) 29 Jun 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “pedit COW” (CVE-2026-46331) 29 Jun 2026
Fortinet Fortinet FortiGate and SSL VPN Credential Harvesting Campaign “FortiBleed” 18 Jun 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “CIFSwitch” (CVE-2026-46243) 2 Jun 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “PinTheft” (CVE-2026-43494) 22 May 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “DirtyDecrypt / DirtyCBC” (CVE-2026-31635) 19 May 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “Fragnesia” (CVE-2026-46300) 15 May 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “Dirty Frag” (CVE-2026-43284, CVE-2026-43500)   8 May 2026
Palo Alto PAN-OS Remote Code Execution Vulnerability (CVE-2026-0300) 6 May 2026
Linux Linux Kernel Local Privilege Escalation Vulnerability “Copy Fail” (CVE-2026-31431)   4 May 2026
ASP.NET ASP.NET Elevation of Privilege (CVE-2026-40372) 22 Apr 2026
ASP.NET ASP.NET Security Feature Bypass Vulnerability (CVE-2025-55315) 23 Oct 2025
Fortinet FortiWeb Authentication Bypass Vulnerability (CVE-2025-52970) 18 Aug 2025

 

 

Facebook Instagram Telegram CUHK Green Office Programme
The Racial Diversity and Inclusion Charter for Employers 2024-2025 Web Accessibility Recognition Scheme - Gold Award
© 2026 All Rights Reserved. The Chinese University of Hong Kong.