CISA added CVE-2026-86060 and CVE-2026-67277 in MikroTik RouterOS to the KEV catalog. MikroTik has released fixed RouterOS versions and recommends restricting SSH access.
Chrome 153 fixes CVE-2026-87491 in V8, which Google knows is being exploited in the wild. Desktop users should update their browser.
Previdian sensors detected requests matching a publicly available proof-of-concept (PoC) for CVE-2026-19490 in NetScaler. Successful compromises have not been confirmed so far.
CISA added CVE-2026-8452 in NetScaler ADC and NetScaler Gateway to its Known Exploited Vulnerabilities catalog. U.S. federal civilian agencies must update the devices by August 29, 2026.
The U.S. cybersecurity agency CISA added the CVE-2023-49105 vulnerability in ownCloud Server to its Known Exploited Vulnerabilities catalog. Unpatched instances may expose users’ files to unauthorized reading, modification, or deletion.