Patch Management

Editorial illustration of a website building block with an open back door and a blueprint beside it, marking the wp2shell WordPress Core unauthenticated RCE.

Vulnerabilities

'wp2shell' WordPress Core Unauthenticated RCE Patched in 6.9.5 and 7.0.2 (CVE-2026-63030)

An unauthenticated remote-code-execution flaw in WordPress Core, disclosed as wp2shell, affects the 6.9 and 7.0 branches. Fixes shipped July 17 in 6.9.5 and 7.0.2 — defender teams and hosting providers should verify patch status rather than assume forced updates landed.

Editorial illustration of a shared-document portal beside a two-day calendar countdown, marking CISA's KEV listing of SharePoint zero-day CVE-2026-58644.

Vulnerabilities

CISA Adds SharePoint RCE Zero-Day CVE-2026-58644 to KEV Catalog With July 19 Patch Deadline

A CVSS 9.8 SharePoint zero-day joins CISA's KEV catalog with a two-day patch deadline — defender teams accelerate verification this week.

Editorial illustration of a sandbox tray cracked open beside a two-day calendar, marking CISA's urgent-patch order for exploited Fortinet FortiSandbox flaws.

Vulnerabilities

CISA Mandates Urgent Patching for Actively Exploited Fortinet FortiSandbox Vulnerabilities (July 19 Deadline)

Two FortiSandbox flaws under active attack — CISA's July 19 deadline puts defender teams on the clock this week.

Editorial illustration of three patch tiles converging on an AI-platform panel, marking the Fortinet, Ivanti and ServiceNow cycle and a critical ServiceNow AI RCE.

Vulnerabilities

Fortinet, Ivanti, and ServiceNow Publish Coordinated Patch Cycle (Critical ServiceNow AI-Platform RCE)

Three vendors, one patch cycle, one critical AI-platform RCE — defender verification across the Fortinet, Ivanti, and ServiceNow product lines this week.

Editorial illustration of an old signed boot key stamped with a revocation mark, marking the coordinated revocation of UEFI shims that bypass Secure Boot.

Vulnerabilities

Old Microsoft-Signed UEFI Shims Continue to Enable Secure Boot Bypass — Coordinated Vendor Response

The eleven old UEFI shims get revoked — defender posture and deployment tracking this week.

Vulnerabilities

F5 Publishes Patches for Multiple NGINX and BIG-IP Vulnerabilities

F5's July patch cycle continues — defender verification across NGINX and BIG-IP deployments this week.

Editorial illustration of a video-call window and a data dashboard each wearing a patch, marking Zoom's CVSS 9.8 Windows fix and Splunk's companion patches.

Vulnerabilities

Zoom Publishes Critical Windows Vulnerability Patch (CVE-2026-53412, CVSS 9.8); Splunk Ships Companion Critical Patches

A CVSS 9.8 Zoom Windows flaw and companion Splunk patches — defender teams verify across enterprise deployments this week.

Editorial illustration of a shared-document portal showing three cracks beside an alarm bell, marking CISA's warning on three exploited SharePoint flaws, two zero-days.

Vulnerabilities

CISA Urges Immediate Patching for Three Exploited SharePoint Vulnerabilities (Two Are Zero-Days)

CISA raises the SharePoint patch stakes — three actively exploited flaws, two of them zero-days, and defender teams accelerate verification this week.

Editorial illustration of a patched industrial control panel beside a calendar, marking ICS Patch Tuesday advisories from Siemens, Schneider and Rockwell.

Vulnerabilities

ICS Patch Tuesday: Siemens, Schneider Electric, and Rockwell Publish Dozens of Vulnerability Advisories

A big ICS Patch Tuesday cycle — defender teams for industrial operators concentrate patch verification this week as Siemens, Schneider Electric, and Rockwell Automation publish dozens of advisories.

Editorial illustration of two patched browser windows beside a blueprint scroll, marking Chrome 150 and Firefox 152 critical fixes and a public Firefox PoC.

Vulnerabilities

Google Chrome 150 and Mozilla Firefox 152 Ship Critical Patches; Public PoC Exists for Firefox Flaws

A same-week Chrome and Firefox critical patch cycle lands with public exploit code reportedly circulating for the Firefox flaws — making browser-fleet verification the defender task of the week.

Editorial illustration of a gateway appliance with a severity dial pinned to maximum, marking SonicWall SMA 1000 zero-days CVE-2026-15409 and CVE-2026-15410.

Vulnerabilities

SonicWall SMA 1000 Zero-Days Detailed: CVE-2026-15409 (CVSS 10.0 SSRF) and CVE-2026-15410 (Admin Command Execution)

SonicWall's SMA 1000 zero-days now have CVE-level detail — defender teams accelerate patch verification this week.

Editorial illustration of a file-share cloud with a closed door and a fresh patch over a sealed crack, marking Progress's confirmed ShareFile zero-day fix.

Vulnerabilities

Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption and Ships Fix

Progress closes the ShareFile emergency with a confirmed zero-day and shipped fix — Storage Zones Controller customers apply and restore this week.

See all