Vulnerability intelligence

CVE-2025-25249 is a heap-based buffer overflow vulnerability affecting Fortinet FortiOS and FortiSwitchManager products. This flaw allows remote attackers to execute unauthorized code or commands on vulnerable devices. The vulnerability is triggered by sending specially crafted network packets to the affected systems. It exists within the `cw_acd` daemon in FortiOS and FortiSwitchManager. Multiple versions of FortiOS (including 6.4, 7.0, 7.2, 7.4, and 7.6 branches) and FortiSwitchManager (versions 7.0 and 7.2) are impacted.

CVE-2026-86060 is an argument-handling flaw identified in MikroTik RouterOS, specifically within its SSH login path. This vulnerability arises when usernames begin with a prohibited character, which can be manipulated to alter the trusted RouterOS policy mask. Such a change ultimately leads to privilege escalation within the system. Exploitation of CVE-2026-86060 requires an unauthenticated SSH session to successfully reach the RouterOS login helper. This flaw is often discussed in conjunction with CVE-2026-67276, an SSH authentication bypass, as chaining these two vulnerabilities can allow an attacker to gain full, unauthenticated control over affected MikroTik devices. MikroTik has released fixes for this issue in RouterOS versions 6.49.21 (Long-term), 7.23.4 (Long-term), and 7.24.2 (Stable).

CVE-2026-67276 is an SSH authentication bypass vulnerability affecting MikroTik RouterOS. The flaw stems from an incomplete verification process of RSA public keys during SSH authentication. Specifically, RouterOS checks the key type and modulus but fails to compare the entire RSA public key, omitting the exponent. This oversight allows an attacker, who possesses knowledge of a user's public modulus, to forge a different key and successfully log in via SSH without needing the corresponding private key. This vulnerability has been actively exploited as part of a larger attack chain dubbed "MikroTrick" and has been addressed in RouterOS versions 6.49.21 (Long-term), 7.23.4 (Long-term), and 7.24.2 (Stable).

CVE-2026-86218 is identified as a pre-authentication remote code execution (RCE) vulnerability affecting N-able N-central, an on-premises remote monitoring and management (RMM) platform. This flaw impacts all N-central versions released prior to 2026.3.1.14. It can be exploited by a remote, unauthenticated attacker without requiring any user interaction. The root cause of CVE-2026-86218 is attributed to improper neutralization of directives in statically saved code, classified as CWE-96. This allows attacker-supplied input to be injected and subsequently executed as code on the server. N-able has released Hotfix 4 for N-central 2026.3, bringing the build to version 2026.3.1.14, to address this vulnerability.

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

CVE-2026-75650 is a zero-day vulnerability, identified as "StyleSmuggler," affecting Adobe Commerce and Magento Open Source versions 2.4.4 through 2.4.9 and earlier. This flaw allows unauthenticated attackers to achieve remote code execution. The vulnerability operates by injecting malicious code into Magento's template system. Attackers can poison PHP code, for instance, by generating a failure report, and then trigger its execution through mechanisms like a failed payment email. Adobe has released an emergency hotfix, APSB26-146, to address this issue.