Patch/Configuration Management

By exploiting one Cisco SD-WAN controller, attackers can push policy changes to every corner of the enterprise.

The Black Duck 2026 OSSRA report explores AI as one of several factors in the historic increase.

SolarWinds has issued fixes for four critical vulnerabilities impacting its Serv-U self-hosted Windows and Linux file transfer software, which could be weaponized to enable remote code execution, according to The Register.

The most severe vulnerability, CVE-2026-22719, is a command injection flaw with a CVSS score of 8.1.

The most critical vulnerability, CVE-2025-49113, is a deserialization of untrusted data flaw with a CVSS score of 9.9.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an advisory detailing a "missing authentication for critical function" flaw, tracked as CVE-2026-1670, with a CVSS score of 9.8 out of 10.

Experts say if teams can’t patch right away, take the portal offline to protect against potential ransomware attacks.

The high-severity vulnerability, identified as CVE-2026-26119 with a CVSS score of 8.8, was discovered by Semperis researcher Andrea Pierini.