Multiple vulnerabilities in Roundcube, no CVE assigned 🤷🏻‍♂️ The Roundcube project today disclosed multiple vulnerabilities in Roundcube Webmail, including IMAP command injection, mail header injection, SSRF, CSRF, XSS, and other security issues. 👉 nt.ls/Hq2Fn

🤝Netlas supported the DRIFT Linux project DRIFT Linux is an open-source, not-for-profit project in digital forensics, OSINT, and cybersecurity. It shares knowledge and builds tools for incident investigation. Netlas has supported independent research within the project. In the future, we hope to see Netlas integrated into DRIFT Linux as one of its tools. Read more about project: driftlinux.org

CVE-2026-89067, CVE-2026-87093, and others: 12 new vulnerabilities in Progress MOVEit Transfer, up to 8.8 rating ‍🔥 Progress Software has disclosed twelve new vulnerabilities in MOVEit Transfer, including authentication bypass, local privilege escalation, SQL injection, and XSS. Successful exploitation could allow an attacker to gain unauthorized access or administrative control and could also lead to data exposure, service instability, and resource exhaustion. 👉 nt.ls/JYNPz

⚙️Hunting Exposed LLM Infrastructure with Netlas In this new article by CyberBit, we explore how any publicly accessible instance of a self-hosted LLM platform can reveal the models it uses and even the runtime environment on which the AI service operates. 👉 netlas.io/blog/hunting_expos…

CVE-2026-97205, CVE-2026-93479, and CVE-2026-15176: Three new vulnerabilities in NGINX, 9.2 rating ‍🔥 F5 has disclosed three new vulnerabilities in NGINX Plus and NGINX Open Source. All of them expose the data plane to remote DoS attacks and potential RCE. An unauthenticated attacker can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. 👉 nt.ls/Jv7X3

CVE-2026-74040, CVE-2026-74041 and others: 15 new vulnerabilities in Wazuh, up to 9.1 rating ‍🔥 Wazuh has disclosed 15 new vulnerabilities in its open-source platform. Two of them could allow an attacker to execute code as root. 👉 nt.ls/lD8bp

CVE-2026-97229: Unauthenticated RCE in GitLab, 10.0 rating ‍🔥 A vulnerability in GitLab disclosed last week allows an unauthenticated attacker to execute arbitrary code on the server via a specially crafted regular expression in a CI/CD configuration. 👉 nt.ls/HVOHN

CVE-2026-102255: Pre-authentication SSRF via unintended forward-proxy in SonicWall SMA1000, 10.0 rating ‍🔥 SonicWall recently disclosed a critical pre-authentication SSRF vulnerability in its SMA1000 appliances. An unauthenticated attacker can exploit this flaw to make the appliance send requests on their behalf, reach internal functionality, and perform unauthorized actions. This vulnerability has also been observed being exploited in the wild! 👉 nt.ls/fbAnv

CVE-2026-76268 and others: Multiple vulnerabilities in Splunk Enterprise, up to 9.8 rating ‍🔥 Splunk has disclosed multiple vulnerabilities in Splunk Enterprise. The most serious is CVE-2026-76268, which allows an unauthenticated attacker to execute operating system commands through the Patroni REST API. 👉 nt.ls/GWmyZ

CVE-2026-106445 & CVE-2026-106446: Two RCE flaws in Handlebars.js, up to 9.8 rating ‍🔥 Two recently disclosed vulnerabilities in Handlebars.js allow an attacker to run arbitrary JavaScript on the server. Both the technical details and PoC exploit code are now public! 👉 nt.ls/KMYBH

🎯 Netlas v1.10 Compare private scans to spot changes in targets, services, and CVE matches — in the UI or via API. Plus smoother attack surface rebuilds, KNX protocol support, host references, and experimental misconfiguration detection. docs.netlas.io/changelog/

CVE-2026-88779: DoS vulnerability in Citrix NetScaler ADC & Gateway, 8.7 rating ‍🔥 A recently disclosed memory overflow vulnerability in NetScaler ADC and NetScaler Gateway can lead to Denial of Service when configured as a SAML SP or IdP. This vulnerability is being actively exploited in the wild! 👉 nt.ls/1PpoX

CVE-2026-96940: EoP vulnerability in MS Exchange Server, 8.8 rating ‍🔥 Microsoft has updated its September 2026 Exchange Server security updates, addressing only one new vulnerability. It allows an authenticated attacker to elevate privileges over a network and gain unauthorized access to other users' mailboxes within the same organization. 👉 nt.ls/L5NIL

CVE-2026-63292 and others: Multiple vulnerabilities in Apache HTTP Server, up to 9.8 rating ‍🔥 Apache Software Foundation disclosed 20 new vulnerabilities. The most severe can lead to RCE, arbitrary code execution via stack-based buffer overflow, and DoS/potential RCE via use-after-free. Memory corruption, privilege escalation, and info disclosure bugs were also patched. 👉 nt.ls/fFMkT

CVE-2026-88771 & CVE-2026-887722: RCE and/or DoS in Citrix NetScaler ADC and NetScaler Gateway, both rated 9.5 ‍🔥 Citrix disclosed two exploited vulnerabilities. The first (CVE-2026-88771) allows an unauthenticated attacker to run arbitrary commands. It affects all NetScaler ADC and NetScaler Gateway deployments. The second (CVE-2026-88772) leads to RCE or DoS. It affects appliances with DTLS enabled. These vulnerabilities are already being actively exploited in the wild, and PoCs exist! 👉 nt.ls/m5KaR

CVE-2026-13016 and others: Multiple vulnerabilities in ServiceNow, up to 9.3 Rating 🔥 Recently disclosed vulnerabilities in ServiceNow include an unauthenticated SQL injection flaw and multiple authorization bypasses. 👉 nt.ls/BxHZZ

CVE-2026-88804: Unauthenticated update of public UI settings leading to stored XSS in Rancher, 9.4 Rating 🔥 An unauthenticated attacker can plant malicious content that runs in the browser of anyone visiting the Rancher login page. This can leak the local administrator bootstrap password or hijack an active admin session, leading to complete control of the Rancher installation and its managed downstream clusters. 👉 nt.ls/dtxM5

CVE-2026-87902: Path Traversal in WordPress leading to RCE, 9.2 Rating 🔥 Another newly disclosed WordPress RCE vulnerability allows an unauthenticated attacker to execute arbitrary code under specific server conditions. 👉 nt.ls/B4TJE

CVE-2026-93952: Improper Input Validation in VeloCloud Orchestrator, 10.0 Rating 🔥 A recently disclosed improper input validation vulnerability in on-premises VeloCloud Orchestrator (VCO) allows a remote attacker to access privileged internal functionality and impact the VCO host. This vulnerability is known to be actively exploited in the wild! 👉 nt.ls/Z9gGT