HIGH/ SEPTEMBER 24, 2026TODAY’S BRIEFING — #188
Check Point RCE, MikroTik SSH chain, malicious npm/Terraform packages in active exploitation
Check Point VPN gateway (CVE-2026-85102) actively exploited, MikroTik routers compromised via SSH chain, malicious Go malware in HashiCorp Terraform, npm
CVE-2026-85102Check Point Security Gateway, Check Point Spark Firewall — Pre-auth RCE via VPN certificate-handling; actively exploited in the wildCVE-2026-67279MikroTik RouterOS — SSH state-machine flaw; part of MikroTrick chain enabling passwordless admin takeoverCVE-2026-87902WordPress — [exploitation unverified]; files written to disk execute shell commandsCVE-2026-75682Adobe Connect, AEM Forms — Critical arbitrary code execution and privilege escalation; patched
Read the full briefing →