Security1 hOctober 28, 2026, 21:00

InfraTrust report warns of exploited flaws in critical network infrastructure

Eclypsium's October InfraTrust Pulse tracked 133 new advisories from 18 vendors covering 2,813 vulnerabilities, including 37 critical ones and 16 with flaws already in CISA's KEV catalog. Actively exploited bugs hit NetScaler, Ivanti Connect Secure, Check Point, Cisco SD-WAN, Arista VeloCloud, FortiMail, F5 BIG-IP and PAN-OS, while PHP2Shell flaws expose appliance management interfaces.

BleepingComputer

Open source

InfraTrust report warns of exploited flaws in critical network infrastructure

133 advisories, 2,813 vulnerabilities, 37 critical, five at CVSS 10.0
16 advisories include flaws listed in CISA's KEV catalog
PHP2Shell (CVE-2026-109618/109619) affects NetScaler, F5, Check Point, QNAP interfaces
Linux kernel Copy Fail flaw appears in 29 advisories from eight vendors

#Citrix#Ivanti#Cisco#Fortinet

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities

Security

Experts call to retire VPNs as AI-driven exploits expose networks

Security

FortiMail and F5 zero-days under active attack: October 2026 patch list

Security

InfraTrust report warns of exploited flaws in critical network infrastructure

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities

Experts call to retire VPNs as AI-driven exploits expose networks

FortiMail and F5 zero-days under active attack: October 2026 patch list

'Black October' vulnerability wave makes infrastructure inventory a board-level priority