critical vulnerability

A newly disclosed Linux kernel vulnerability, CVE-2026-46333, allows attackers to steal SSH private keys and gain root access through a local privilege escalation flaw affecting Linux systems for nearly nine years.

A severe MongoDB vulnerability (CVE-2026-8053) enables attackers to execute arbitrary code on affected servers, risking full system takeover and data theft. Self-hosted deployments must patch immediately to prevent potential exploitation.

Fortinet has disclosed an actively exploited critical vulnerability, CVE-2024-47575, impacting FortiManager and FortiAnalyzer devices, which has been attributed to threat cluster UNC5820. This flaw, labeled FortiJump, enables remote unauthenticated attackers to execute arbitrary code on compromised systems, allowing for data exfiltration and potential lateral movement across enterprise networks. The U.S. CISA has flagged this vulnerability for immediate federal agency action, urging rapid patching to prevent unauthorized access and data theft.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding ongoing cyberattacks on critical infrastructure, particularly targeting Operational Technology (OT) and Industrial Control Systems (ICS). These attacks are being executed using basic methods, such as brute force attacks and exploiting default credentials, impacting vital sectors like water and wastewater systems.