CERT24Key vulnerabilities in week 39 of 2026: WordPress, Chrome, GitHub and othersLoading data…
CERT24Threat Observatory
Period

Key vulnerabilities in week 39 of 2026: WordPress, Chrome, GitHub and others

The RIA roundup covers multiple critical or high-impact vulnerabilities. Active exploitation was confirmed for Citrix NetScaler ADC and NetScaler Gateway, Roundcube Webmail, and F5 BIG-IP APM. A proof of concept was published for the WordPress vulnerability, and scanning attempts against unpatched devices were detected hours after the fix was released; a proof of concept was also published for the D-Link DIR-822A vulnerability, for which no fix is available.

← Back to intelligence

Key vulnerabilities in week 39 of 2026: WordPress, Chrome, GitHub and others

The RIA roundup covers multiple critical or high-impact vulnerabilities. Active exploitation was confirmed for Citrix NetScaler ADC and NetScaler Gateway, Roundcube Webmail, and F5 BIG-IP APM. A proof of concept was published for the WordPress vulnerability, and scanning attempts against unpatched devices were detected hours after the fix was released; a proof of concept was also published for the D-Link DIR-822A vulnerability, for which no fix is available.