Patch Tuesday News
Latest Patch Tuesday news and analysis — 8 articles tagged Patch Tuesday on The Robotics Media.
- CISA Warns Citrix NetScaler CVE-2026-8452 Is Under Active Attack — — CISA has added a previously patched Citrix NetScaler ADC and Gateway flaw, CVE-2026-8452, to its Known Exploited Vulnerabilities catalog after attacke...
- Microsoft Patches Max-Severity Entra ID Flaw CVE-2026-69836 — — Microsoft on Aug 21, 2026 disclosed CVE-2026-69836, a CVSS-10.0 deserialisation flaw in Entra ID that allowed unauthenticated remote code execution; t...
- Microsoft patches 421 CVEs in August 2026 Patch Tuesday, including exploited afd.sys zero-day — — Microsoft's August 2026 Patch Tuesday resolves 421 CVEs, including CVE-2026-68820, an actively exploited use-after-free in afd.sys that grants SYSTEM...
- Oracle E-Business Suite Flaw CVE-2026-46817 Exploited In The Wild, 950 Instances Exposed — — Attackers are exploiting a critical unauthenticated flaw in Oracle E-Business Suite Payments in the wild, and Shadowserver counts roughly 950 vulnerab...
- Public GitLab RCE PoC Lets Any User Run Commands As Git Via Oj Bugs — — Security researcher Yuhang Wu published a working proof-of-concept exploit that chains two Ruby Oj parser bugs to execute code as git on unpatched sel...
- Oracle Ships Record 1,449 Patches In Largest Critical Patch Update Ever — — Oracle's July 2026 Critical Patch Update fixes 1,449 security issues covering 1,235 unique CVEs across 32 product families, the largest CPU in the com...
- Microsoft Patches Record 622 CVEs, SharePoint And AD FS Zero-Days Already Exploited — — Microsoft's July 2026 Patch Tuesday shipped 622 CVEs — the largest release in company history — including two actively exploited zero-days in SharePoi...
- WordPress Force-Patches wp2shell RCE Flaw Affecting Every 6.9 And 7.0 Site — — WordPress on July 17 shipped 6.9.5 and 7.0.2 to close wp2shell, a pre-authentication remote code execution flaw in core that let an anonymous HTTP req...