CRITICAL zero-day in Cisco Secure Email Gateway is under active attack. Patch is out — apply immediately to prevent risk. No CVE or technical details yet. https://radar.offseq.com/threat/cisco-patches-secure-email-gateway-zero-day-exploited-in-attacks-76a43690673247c4 #OffSeq #Cisco #ZeroDay

Critical stack buffer overflow in D-Link DI-8300 (16.07) enables remote code execution. Exploit code is public. Restrict device access & monitor for attacks. https://radar.offseq.com/threat/cve-2026-91003-stack-based-buffer-overflow-in-d-link-di-8300-ce23f2734338a347 #OffSeq #CVE202691003 #DLink

D-Link DI-8400 routers (fw 16.07) hit by CRITICAL stack-based buffer overflow (CVE-2026-91001, CVSS 9.4) 🚨. Public exploit code available — restrict management access now. https://radar.offseq.com/threat/cve-2026-91001-stack-based-buffer-overflow-in-d-link-di-8400-abc2e3e858f255b9 #OffSeq #CVE202...

EFM ipTIME C200E 1.094 faces a CRITICAL OS command injection flaw (CVE-2026-90847, CVSS 9.4). Public exploit exists — restrict access and monitor devices. https://radar.offseq.com/threat/cve-2026-90847-os-command-injection-in-efm-iptime-c200e-1c30057b126bbbf4 #OffSeq #Vulnerability #IoTSecurity

D-Link DWR-M921 v1.1.52 hit by CRITICAL OS command injection (CVE-2026-90703) 🚨 Public exploit available, no patch yet. Restrict access & monitor activity. More: https://radar.offseq.com/threat/cve-2026-90703-os-command-injection-in-d-link-dwr-m921-f9739a3ef4495656 #OffSeq #CVE #RouterSecurity

CISA reports active exploitation of a CRITICAL GitLab vulnerability. No details on affected versions — monitor vendor advisories for updates and be ready to patch. https://radar.offseq.com/threat/cisa-hackers-now-exploit-max-severity-gitlab-flaw-in-attacks-fbc70b60d8092d92 #OffSeq #GitLab #CyberT...

Totolink A3002MU routers face CRITICAL buffer overflow (CVE-2026-90607, CVSS 9.4). Exploit code is public. Restrict remote access & monitor for attacks until patches are issued. https://radar.offseq.com/threat/cve-2026-90607-buffer-overflow-in-totolink-a3002mu-f5be31acbfac3e1f #OffSeq #Vulnerabil...

Totolink A3002MU CRITICAL buffer overflow (CVSS 9.4) in /boafrm/formPortFw. Exploit code released — no patch yet. Restrict access & monitor for updates. https://radar.offseq.com/threat/cve-2026-90608-buffer-overflow-in-totolink-a3002mu-43328ea907451224 #OffSeq #CVE202690608 #Vuln

Totolink A3002MU faces a CRITICAL buffer overflow (CVE-2026-90606, CVSS 9.4). Remote exploit possible; public PoC exists. Assess exposure & restrict remote access. https://radar.offseq.com/threat/cve-2026-90606-buffer-overflow-in-totolink-a3002mu-ff1e560ec5dedad6 #OffSeq #CVE202690606 #Vulnerability

LangBot 4.0.8.1 – 4.10.10 has a CRITICAL flaw: weak password reset keys & no rate limiting enable admin password takeovers. Upgrade to 4.10.11+ ASAP. https://radar.offseq.com/threat/cve-2026-90562-insufficient-entropy-in-langbot-app-langbot-e9a2899a1e2d1fa5 #OffSeq #CVE202690562 #AppSec

irontec sngrep <=1.8.4 hit by CRITICAL stack buffer overflow (CVE-2026-90558). Malicious SIP headers can crash or lead to RCE. Avoid untrusted SIP packets, check vendor for fixes. https://radar.offseq.com/threat/cve-2026-90558-stack-based-buffer-overflow-in-irontec-sngrep-f0d23a6d23082198 #OffSeq...

CVE-2026-90456: CRITICAL in CISA Malcolm (<=26.05.x). Default admin password in inventory module enables takeover if setup isn't run. Regenerate creds now. https://radar.offseq.com/threat/cve-2026-90456-cwe-1392-use-of-default-credentials-in-cisa-malcolm-2141cfec27dc9c24 #OffSeq #CISAMalcolm #sec...

Cloud Foundry UAA faces a CRITICAL vuln (CVE-2026-47839, CVSS 9.2): OIDC users can escalate to uaa.admin via wildcard group mapping. Check configs & stay tuned for patches. https://radar.offseq.com/threat/cve-2026-47839-vulnerability-in-cloud-foundry-foundation-uaa-fe07e0d8fe092d86 #OffSeq #Cloud...

CRITICAL PaperCut NG/MF zero-days (CVE-2026-82078, CVE-2026-81578) exploited by AI-powered attacks. Remote code exec, credential theft, & domain admin access in 48 countries. Patch now: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #ZeroDa...

CRITICAL RCE (CVE-2025-14733) in WatchGuard Firebox (Fireware OS 11.x+, 12.x+, 2025.1 – 2025.1.3) is being exploited by ransomware gangs. Patch now and review VPN settings! https://radar.offseq.com/threat/cisa-watchguard-rce-flaw-now-exploited-in-ransomware-attacks-43ee9be28a996ee8 #OffSeq #Watch...

Chrome HIGH severity zero-day patched after active exploitation. No CVE or version info yet. Update Chrome now to reduce risk. Full details: https://radar.offseq.com/threat/google-warns-of-new-chrome-zero-day-bug-exploited-in-attacks-6560a13f4031475b #OffSeq #Chrome #ZeroDay

Google Chrome CRITICAL vuln (CVE-2026-87628): Cast component use-after-free in <153.0.8010.36 enables code exec outside sandbox. Patch status TBC – review https://radar.offseq.com/threat/cve-2026-87628-use-after-free-in-google-chrome-1e9eb757633453cf #OffSeq #Chrome #Security

Red Hat ELS 9.2 389-ds-base has CRITICAL vulns: heap overflow, privilege escalation, & LDAP ACI bypass. Update to 9.2.4+ now to secure your directory servers. https://radar.offseq.com/threat/red-hat-security-advisory-389-ds-base-security-bug-fix-and-enhancement-update-0c583247a0fb050c #OffSeq #Re...

Red Hat 389-ds-base (RHEL 9.4) hit by CRITICAL vulns: heap overflow, privilege escalation, ACI bypass. Patch now via RHSA-2026:64781 https://radar.offseq.com/threat/red-hat-security-advisory-389-ds-base-security-bug-fix-and-enhancement-update-c933f76430be2c96 #OffSeq #RedHat #LDAP

CRITICAL: D-Link DIR-895L (A1_102b07) stack buffer overflow (CVE-2026-86509) can be exploited via LAN. Exploit is public — apply controls and watch for patches. https://radar.offseq.com/threat/cve-2026-86509-stack-based-buffer-overflow-in-d-link-dir-895l-9794ccee4cffa64a #OffSeq #CVE202686509 #Io...