New that day
- criticalpatchedexploited BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance. Added to CISA KEV on 2026-10-16 (federal deadline 2026-10-19).
- highpatchedexploited Fortinet Multiple Products Path Traversal Vulnerability FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. Added to CISA KEV on 2026-10-16 (federal deadline 2026-10-19).