Citrix NetScaler: two exploited RCE zero-days
Soclyde Team
Citrix and cybersecurity agencies warn about two critical flaws exploited in NetScaler ADC and Gateway.
Resources
Blog
Insights, field notes, and practical guidance on off-cloud security.
Cloudflare explains how residual storage blocks could cross tenant boundaries and says it fixed the issue without evidence of malicious exploitation.
ManageEngine: exposed Google Cloud key
Soclyde Team
CVE-2026-86708 involves a Google Cloud service-account key bundled with Applications Manager. See affected builds and Zoho’s fixes.
Oracle PeopleSoft: a flaw used by ShinyHunters
Soclyde Team
An unauthenticated PeopleTools RCE is being reused in a campaign targeting Oracle PeopleSoft environments.
ServiceNow fixed five AI Platform CVEs. Check Australia, Yokohama and Zurich patch levels and verify the update applied to your instance.
Zimbra CVE-2026-73570 actively exploited
Soclyde Team
Microsoft details exploitation of CVE-2026-73570 on exposed Zimbra servers. Learn the affected configurations, fixed versions and checks to run.
Adobe Connect: nine critical and important flaws
Soclyde Team
APSB26-150 fixes nine Adobe Connect flaws, including SQL injection. Update to Connect 12.12 or Android app 4.5.
CVE-2026-28324 and CVE-2026-28325 allow remote code execution in Observability Self-Hosted before 2026.2.3.
CVE-2026-87902 is being exploited against vulnerable WordPress sites. Fixed versions, RCE conditions and post-update checks.
CVE-2026-71362: Adobe Commerce flaw exploited
Soclyde Team
CVE-2026-71362 enables customer account takeover on Adobe Commerce and Magento Open Source. Check affected versions and apply the patch.
Kiteworks lifted its shutdown advisory on September 27, 2026, after patching a critical flaw. What is known and what customers should verify.
Three RouterOS flaws are being exploited, especially where SSH is exposed. Fixed versions and checks for administrators.
Take the next step
Build a calmer password strategy
Have a question about off-cloud security or Soclyde? Let’s talk directly.