F5 BIG-IP APM CVE-2026-94127: exploited zero-day enables RCE
F5 confirms exploitation of CVE-2026-94127 and CISA lists it in KEV. Exposure requires an APM access policy with an OAuth profile; prioritise fixes and checks.
Read the analysisSECURCHECK · CYBER NEWS
Vulnerabilities
Vendor alerts and steps for affected systems.
PUBLIC SERVICES · VERIFIED GUIDE
Read the overview Data breaches in France: follow the facts
A sourced overview of tax, education and training incidents, with a clear distinction between confirmed exposure and claims.
Monthly overviewCyber incidents in September 2026
WordPress CVE-2026-87902: check and install the security update
WordPress released fixes for path traversal in page-template resolution that can lead to code execution under specific conditions.
Read the analysis
Roundcube CVE-2026-48842: pre-auth SQL injection now exploited
Canada's Cyber Centre reports exploitation of CVE-2026-48842, fixed in Roundcube in May. Affected versions, scope and administrator actions.
Read the analysis
PaperCut: active exploitation and 31 identified organisations in France
PaperCut confirms exploitation of NG/MF. A tally cited by the French health CERT identifies 395 organisations in 48 countries, including 31 in France.
Read the analysis
Google Pixel zero-day CVE-2026-58704: install the September update
Google reports indications of limited, targeted exploitation of CVE-2026-58704. The September Pixel security update addresses the flaw.
Read the analysis
TeamCity On-Premises: patch critical CVE-2026-63077
JetBrains issued fixes for unauthenticated remote code execution in TeamCity On-Premises and later reported attempted exploitation.
Read the analysis
Check Point VPN CVE-2026-50751: exploited authentication bypass
Check Point reports active exploitation of CVE-2026-50751 in certain VPN deployments using the deprecated IKEv1 protocol.
Read the analysisWe distinguish confirmed facts from claims and update articles when primary sources publish new information. These reports are not a real-time incident feed.