Adobe Connect & AEM Forms face CRITICAL vulnerabilities, including SQLi, XSS, SSRF. Patch within 30 days to prevent code execution & privilege escalation. No active exploits. https://radar.offseq.com/threat/adobe-patches-critical-flaws-in-connect-aem-forms-c099ebdbecb92098 #OffSeq #Adobe #Security

CRITICAL zero-day (CVE-2026-94127) in F5 BIG-IP APM (OAuth Auth Server) enables unauth RCE. Actively exploited. Patch hotfixes for 21.1.0, 17.5.0 – 17.5.1, 17.1.0 – 17.1.3 ASAP. https://radar.offseq.com/threat/critical-f5-big-ip-vulnerability-exploited-as-zero-day-024f528e7ee83eed #OffSeq #F5 #Ze...

CRITICAL zero-day (CVE-2026-93952) impacts Arista VeloCloud Orchestrator (on-prem <5.2.3.16, <6.4.2.8). Remote attackers can exploit without credentials. Patch immediately. https://radar.offseq.com/threat/arista-urges-immediate-patching-of-exploited-vco-zero-day-0c28c2caa003025a #OffSeq #ZeroDay ...

CVE-2026-94127 is a CRITICAL zero-day in F5 BIG-IP APM (OAuth Authorization Servers) with active RCE exploitation. Patch now or apply iRule mitigation. https://radar.offseq.com/threat/f5-patches-big-ip-apm-zero-day-flaw-exploited-in-rce-attacks-191545153729ae57 #OffSeq #F5 #ZeroDay

WordPress patched the CRITICAL Click2Shell flaw (v4.7 – 7.1.0). Attackers could trigger remote code execution via inactive theme previews. Update to 7.1.1 or apply security backports immediately. https://radar.offseq.com/threat/wordpress-patches-click2shell-vulnerability-f550dfa1d978a913 #OffSeq ...

LOW severity: ISC Stormcast (Sep 22, 2026) reports no new vulnerabilities or threats. No affected products or action needed. Details: https://radar.offseq.com/threat/isc-stormcast-for-tuesday-september-22nd-2026-httpsiscsansedupodcastdetail10104-tue-sep-22nd-1ebaaa69bb952985 #OffSeq #Cybersecurit...

LOW severity: US proposes AI incident alert system with China. No current technical threat, but signals future policy changes for AI risk reporting. Monitor developments. https://radar.offseq.com/threat/us-proposes-ai-incident-alert-system-in-talks-with-china-bessent-says-0ae21c941fe0207e #OffSeq...

Netcore NBR200V2 firmware 1.3.241127.071246 faces CRITICAL remote command injection (CVE-2026-94099, CVSS 9.4). Public exploit, no patch. Isolate & monitor systems now. https://radar.offseq.com/threat/cve-2026-94099-command-injection-in-netcore-nbr200v2-adc35b079f75e0e5 #OffSeq #Netcore #Vulnerab...

Netcore NBR200V2 routers (v1.3.241127.071246) face a CRITICAL buffer overflow (CVE-2026-94101). Public exploit, no patch. Restrict remote access or replace device. https://radar.offseq.com/threat/cve-2026-94101-buffer-overflow-in-netcore-nbr200v2-21b7762bd81c815b #OffSeq #Netcore #Vulnerability

Three CRITICAL Linux kernel vulnerabilities now in CISA KEV: exploited for DoS, memory disclosure, or memory corruption. Patch all Linux systems immediately. Details: https://radar.offseq.com/threat/organizations-warned-of-3-exploited-linux-kernel-vulnerabilities-1c077e64a021762d #OffSeq #Linux #...

BioStar BIOS Update Utility 1.9.7.3 faces CRITICAL CVE-2026-94146: local write-what-where flaw with public exploit. No vendor fix. Restrict local access now. https://radar.offseq.com/threat/cve-2026-94146-write-what-where-condition-in-biostar-bios-update-utility-47de5318713632c6 #OffSeq #CVE20269...

BioStar Temp Monitor Utility 1.2.1806.2200 faces CRITICAL CVE-2026-94142: local attackers can perform arbitrary memory writes. No patch — limit local access. https://radar.offseq.com/threat/cve-2026-94142-write-what-where-condition-in-biostar-temperature-monitor-utility-b89c455f336372e0 #OffSeq #...

CRITICAL buffer overflow in Netcore NBR200V2 v1.3.241127.071246 (CVE-2026-94100). Remote exploit available. Restrict WAN VLAN config access — no patch yet. https://radar.offseq.com/threat/cve-2026-94100-buffer-overflow-in-netcore-nbr200v2-9ab8800727104374 #OffSeq #Netcore #Vuln

Netcore NBR200V2 routers v1.3.241127.071246 face a CRITICAL 9.4 CVSS command injection (CVE-2026-94096). Exploit is public. No patch yet — segment or limit access. https://radar.offseq.com/threat/cve-2026-94096-command-injection-in-netcore-nbr200v2-73f6afc059a1e2bc #OffSeq #Netcore #Vulnerability

CRITICAL: Comfast CF-N1-S v2.6.0.1 has a stack buffer overflow (CVE-2026-94003). Remote exploitation possible; public exploit disclosed. Restrict access, monitor for anomalies. https://radar.offseq.com/threat/cve-2026-94003-stack-based-buffer-overflow-in-comfast-cf-n1-s-1046130f838f5eec #OffSeq #...

D-Link R95 routers (BE9500_1.00.16) face a CRITICAL OS command injection (CVE-2026-93958, CVSS 9.4). No patch — public exploit exists. Restrict device exposure & monitor for abuse. https://radar.offseq.com/threat/cve-2026-93958-os-command-injection-in-d-link-r95-a15aa6eceda20938 #OffSeq #CVE20269...

CRITICAL vuln in Suricata 8.0.0 – 8.0.6 (CVE-2026-94083): DoH2 type confusion can lead to DoS. Upgrade to 8.0.7+ ASAP 🛡️. Details: https://radar.offseq.com/threat/cve-2026-94083-cwe-843-access-of-resource-using-incompatible-type-type-confusion-in-oisf-suricata-a9f0752b258da862 #OffSeq #Suricata #...

Suricata <8.0.7 has a CRITICAL use-after-free flaw (CVE-2026-94084, CVSS 9.4). Affected by certain HTTP/2 rules. Upgrade to 8.0.7+ to mitigate risks. https://radar.offseq.com/threat/cve-2026-94084-cwe-416-use-after-free-in-oisf-suricata-f54e858a25f14d6f #OffSeq #Suricata #Vulnerability

Botiga Pro <1.6.5 has a CRITICAL flaw: missing REST API auth lets attackers hijack WP sites — inject scripts, trash posts, escalate privileges. Update to 1.6.5+ ASAP. https://radar.offseq.com/threat/cve-2026-86591-cwe-862-missing-authorization-in-botiga-pro-dcf5d6244d090e38 #OffSeq #WordPress #Vuln

Totolink A3002MU faces a CRITICAL command injection flaw (CVE-2026-93742, CVSS 9.4). Remote attackers can exploit this — public exploit exists. Restrict access & monitor for compromise. https://radar.offseq.com/threat/cve-2026-93742-command-injection-in-totolink-a3002mu-0eaffbb279ea62b7 #OffSeq #...