Citrix has fixed CVE-2026-107406, a memory-overflow vulnerability in specific NetScaler ADC and Gateway SAML configurations that may enable code execution.
Resources
Blog
Insights, field notes, and practical guidance on off-cloud security.
GitLab fixes critical CI/CD regex flaw
Soclyde Team
GitLab's October 12 patch release fixes CVE-2026-97229, a critical flaw in its CI/CD regular-expression compiler that could enable server-side code execution.
HPE fixes critical ClearPass vulnerabilities
Soclyde Team
HPE's October advisory covers ten critical flaws in ClearPass Policy Manager and related components, including authentication bypass and remote code execution risks.
Ivanti patches exploited Connect Secure flaw
Soclyde Team
Ivanti says attackers exploited CVE-2026-104935 in Connect Secure VPN appliances. The disclosure includes fixed versions and reports of a wider zero-day chain.
CVE-2026-93026 could let a Backup Viewer change Veeam Enterprise Manager's master key and stored antivirus-update credentials; Veeam has released a fix.
An October 6, 2026 notice says personal data was extracted during the ransomware incident Advantest discovered in February.
On October 12, 2026, the group reported a network security issue and precautionary shutdown of some systems. The cause remains unknown.
Bricksforge: critical WordPress flaw exploited
Soclyde Team
CVE-2026-85097 enables unauthenticated file uploads in Bricksforge. Patchstack observed exploitation attempts and a fixed version is available.
iRhythm notifies patients after data breach
Soclyde Team
On October 2, iRhythm detailed unauthorised access to third-party-hosted business applications. State notices list more than 360,000 people.
SonicWall SMA 1000: critical SSRF flaw patched
Soclyde Team
SonicWall patched several SMA 1000 appliance flaws, including a pre-authentication SSRF rated CVSS 10. Here is the scope and what administrators should verify.
Intermarché and U confirmed a refrigeration cyberattack on 12 October 2026. What is established, what remains unknown and which maintenance access to review.
Apiiro reports thousands of fake GitHub repositories redirecting download links to SmartLoader and StealC malware.
Take the next step
Build a calmer password strategy
Have a question about off-cloud security or Soclyde? Let’s talk directly.