Patch Management Updates | Hexnode Threat Watch

Patch Management

DeepSeek Harness CVE-2026-82533 Let AI Agents Disable Their Own Sandbox

DeepSeek Harness CVE-2026-82533 Let AI Agents Disable Their Own Sandbox

Sep 11

7 min read

N-able N-central CVE-2026-86218 Pre-Auth RCE and MSP Fleet Risk

N-able N-central CVE-2026-86218: Pre-Auth RCE and MSP Fleet Risk

Sep 11

6 min read

MikroTrick Turns Exposed RouterOS SSH Into Full Admin Takeover

MikroTrick Turns Exposed RouterOS SSH Into Full Admin Takeover

Sep 9

5 min read

PostgreSQL CVE-2026-6471 Turns Replication Access Into Server-Side Code Execution

PostgreSQL CVE-2026-6471 Turns Replication Access Into Server-Side Code Execution

Sep 8

7 min read

cve 2026 14894

CVE-2026-14894: Super Forms, Elementor Pro RCE Under Attack

Sep 7

7 min read

VMware Desktop Virtualization Bugs Put Developer and Admin Hosts at Escape Risk

VMware Desktop Virtualization Bugs Put Developer and Admin Hosts at Escape Risk

Sep 7

5 min read

Sangoma Switchvox Attack Exploits CVE-2026-9586 to Attempt Reverse Shell

Sangoma Switchvox Attack Exploits CVE-2026-9586 to Attempt Reverse Shells

Sep 3

7 min read

papercut cve 2026 82078

PaperCut CVE-2026-82078: Second Emergency Patch After Attackers Broke the First Fix

Sep 1

6 min read

ownCloud KEV Exploitation Turns WebDAV Defaults Into Nuclear Research Data Theft

ownCloud KEV Exploitation Turns WebDAV Defaults Into Nuclear Research Data Theft

Sep 1

6 min read

Keycloak CVE-2026-18963 Critical Account Takeover Patch and IAM Defense Guide

Keycloak CVE-2026-18963: Critical Account Takeover Patch and IAM Defense Guide

Sep 1

5 min read

GitLab CVE-2026-19478

GitLab CVE-2026-19478 Active Exploitation: Self-Managed Instance Response Guide

Sep 1

2 min read

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Aug 28

8 min read

avada cve 2026 18431

Avada CVE-2026-18431: Critical WordPress RCE Patch Guide

Aug 28

8 min read

GitHub-actions-checkout-update

GitHub actions/checkout Blocks Common Pwn Request CI/CD Attack Patterns

Aug 20

3 min read

CVE-2026-46817

CVE-2026-46817 Actively Exploited: Oracle E-Business Suite Patch Priority

Aug 19

3 min read

Medtronic-data-breach

Medtronic Data Breach: 3.8 Million Affected After ShinyHunters Attack

Aug 19

4 min read

Estee-Lauder-breach

Estée Lauder Oracle E-Business Breach: Enterprise Patch and Identity Lessons

Aug 19

5 min read

CVE-2026-20349 Cisco ASA and FTD VPN Flaw Exploited in the Wild

CVE-2026-20349: Cisco ASA and FTD VPN Flaw Exploited in the Wild

Aug 17

9 min read

CVE-2026-8037 Progress LoadMaster Flaw Added to CISA KEV

CVE-2026-8037: Progress LoadMaster Flaw Added to CISA KEV

Aug 10

9 min read

adobe campaign classic vulnerability

Adobe Campaign Classic Vulnerability: Inside CVE-2026-48449’s CVSS 10 Flaw

Aug 5

5 min read

teamcity rce

TeamCity RCE: What Enterprises Need to Know About CVE-2026-63077

Aug 4

5 min read

FastJson CVE-2026-16723 Zero-Day Hits US Enterprises

FastJson CVE-2026-16723 Zero-Day Hits US Enterprises: What to Know and How to Respond

Jul 29

6 min read

HelloNet Malware Abuses ViPNet Through DLL Side loading

HelloNet Malware Abuses ViPNet Through DLL Sideloading

Jul 27

7 min read

legacyhive zero day

LegacyHive Zero-Day: Enterprise Response Before Microsoft’s Fix

Jul 23

6 min read

cve 2026 6875

ServiceNow CVE-2026-6875 Exploitation: AI Platform Patch and Detection Guidance

Jul 23

5 min read

wsus sync delays

Microsoft WSUS Sync Delays: Why Patch Infrastructure Health Is a Security Priority

Jul 23

5 min read

wp2shell wordPress vulnerabilities

WP2Shell WordPress Vulnerabilities: Enterprise Response Guide

Jul 22

6 min read

Critical NGINX Heap Overflow Puts Patch Management Back in Focus

Critical NGINX Heap Overflow Puts Patch Management Back in Focus

Jul 21

6 min read

7-Zip RCE Bug Highlights the Hidden Cost of Manual App Updates

7-Zip RCE Bug Highlights the Hidden Cost of Manual App Updates

Jul 21

4 min read

Sonic Wall SMA1000 Zero-Day Patch

SonicWall SMA1000 Zero-Day: Patch CVE-2026-15409 & CVE-2026-15410

Jul 15

7 min read

u boot vulnerabilities

U-Boot Vulnerabilities Highlight a Critical Blind Spot in Enterprise Firmware Security

Jul 14

5 min read

Nihon Kotsu Cyberattack Disrupts Japans Largest Taxi Operator After Malware Incident

Nihon Kotsu Cyberattack Disrupts Japan’s Largest Taxi Operator After Malware Incident

Jul 14

6 min read

OpenMandriva Sabotage

OpenMandriva Sabotage: What Linux Fleet Owners Can Learn About Package Trust

Jul 13

6 min read

Citrix NetScaler Exploit CVE-2026-8451 Reportedly Targeted Within 24 Hours of Disclosure

Citrix NetScaler Exploit: CVE-2026-8451 Reportedly Targeted Within 24 Hours of Disclosure

Jul 3

6 min read

ptc windchill vulnerability

PTC Windchill Vulnerability Added to CISA KEV After Web Shell Exploitation

Jun 30

7 min read

PixelSmash Puts Video Preview Pipelines and Media Servers on the Patch List

FFmpeg PixelSmash CVE-2026-8461: Why Enterprises Should Patch Media Pipelines Fast

Jun 29

4 min read

cisco unified cm vulnerability

Cisco Unified CM Vulnerability Exploited: Why VoIP Infrastructure Needs Patch Urgency

Jun 26

6 min read

FireAnt Metakit Supply Chain Attack Delivers SPECTRALVIPER to Vietnam Investors

FireAnt Metakit Supply Chain Attack Delivers SPECTRALVIPER to Vietnam Investors

Jun 18

8 min read

RoguePlanet Zero-Day Confirmed as CVE-2026-50656

Microsoft Confirms RoguePlanet Defender Zero-Day CVE-2026-50656 and Says a Patch Is Coming

Jun 18

5 min read

microsoft june 2026 patch tuesday

Microsoft June 2026 Patch Tuesday Breaks Records with Around 200 Vulnerability Fixes

Jun 11

5 min read

WinRAR Vulnerability CVE-2025-8088

WinRAR Vulnerability CVE-2025-8088 Exploited Against Ukrainian Organizations

Jun 11

6 min read

SolarWinds Serv-U KEV Listing Turns File Transfer Availability Into an Urgent Patch Priority

SolarWinds Serv-U KEV Listing Turns File Transfer Availability Into an Urgent Patch Priority

Jun 9

6 min read

DriveSurge Malware Campaign Hijacks Websites for ClickFix and FakeUpdate Attacks

DriveSurge Malware Campaign Hijacks Websites for ClickFix and FakeUpdate Attacks

Jun 3

6 min read

palo alto globalprotect vulnerability

Palo Alto GlobalProtect Vulnerability CVE-2026-0257 Exploited in Active Attacks

Jun 3

3 min read

Microsoft May 2026 Patch Tuesday Fixes 120 Vulnerabilities Across Enterprise Product

Microsoft May 2026 Patch Tuesday Fixes 120 Vulnerabilities Across Enterprise Products

May 13

5 min read