Overview CVE-2026-84411 is a critical integer underflow vulnerability affecting the web management service in MikroTik RouterOS. The vulnerability occurs during the processing of HTTP request bodies and is reachable before authentication, allowing a remote unauthenticated attacker to potentially execute arbitrary code with root privileges or cause a denial-of-service condition using…

Overview  CVE-2026-94127 is a critical heap-based buffer overflow vulnerability affecting F5 BIG-IP Access Policy Manager (APM). The vulnerability occurs when a BIG-IP virtual server is configured with both an APM access policy and an OAuth profile, with APM operating as an OAuth Authorization Server.  An unauthenticated remote attacker can send…

Overview DSA-2026-393 is a critical Dell security advisory addressing multiple vulnerabilities affecting Dell ObjectScale and Elastic Cloud Storage (ECS). The advisory includes proprietary Dell vulnerabilities and vulnerabilities in third-party components such as Apache Log4j, liblzma and the Linux Kernel. The most severe issue, CVE-2026-70416, is a critical deserialisation of untrusted…

Risk: High UgCERT issues high severity advisory to alert stakeholders to the risks posed by Rovnix campaigns, particularly in corporate environments. Platforms Affected Summary Rovnix is a high-risk Windows bootkit and Trojan family that modifies NTFS boot sectors, loads malicious code during startup, hides activity, and can download additional malware.…