Our blog | Matthews Enterprises

Our blog

Atlassian CVE-2026-21589 (CVSS 9.3) file read on 8 products

Matthews Enterprises (PTY) LTD, Francois Matthews

Atlassian CVE-2026-21589 (CVSS 9.3) file read on 8 products

Atlassian disclosed CVE-2026-21589 on 5 October. An unauthenticated attacker who knows a file path can read it from eight self-hosted Data Center products.

Cybersecurity

Oct 6, 2026

NetScaler CVE-2026-88779 (CVSS 8.7) crashes SAML appliances

Matthews Enterprises (PTY) LTD, Francois Matthews

NetScaler CVE-2026-88779 (CVSS 8.7) crashes SAML appliances

Citrix confirmed targeted attacks against SAML NetScaler ADC and Gateway builds. CISA wants the patch applied by 7 October 2026.

Cybersecurity

Oct 6, 2026

CVE-2026-88779: NetScaler SAML crash, KEV due 7 October

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-88779: NetScaler SAML crash, KEV due 7 October

CVE-2026-88779 can crash SAML on NetScaler ADC and Gateway. CISA set a 7 October federal deadline. Upgrade and triage.

Cybersecurity

Oct 6, 2026

FBI removes Accenture contractor after missed PeopleSoft patch

Matthews Enterprises (PTY) LTD, Francois Matthews

FBI removes Accenture contractor after missed PeopleSoft patch

The FBI removed an Accenture contractor after a missed patch on a third-party platform tied to a ShinyHunters theft of employee data.

Cybersecurity

Oct 6, 2026

CVE-2026-104286: FortiMail unauthenticated file write, CVSS 9.8

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-104286: FortiMail unauthenticated file write, CVSS 9.8

CVE-2026-104286, CVSS 9.8, is exploited in the wild. Unauthenticated HTTP writes files on FortiMail. Apply the workaround and hunt.

Cybersecurity

Oct 6, 2026

Rejetto HFS CVE-2026-61500: scanners forging admin sessions, CVSS 9.3

Matthews Enterprises (PTY) LTD, Francois Matthews

Rejetto HFS CVE-2026-61500: scanners forging admin sessions, CVSS 9.3

Scanners are probing Rejetto HFS for CVE-2026-61500, a session-forgery bug that leads to admin access and remote code execution on versions 3.0.0 through 3.2.0.

Cybersecurity

Oct 6, 2026

FBI removes Accenture contractor after a missed PeopleSoft patch

Matthews Enterprises (PTY) LTD, Francois Matthews

FBI removes Accenture contractor after a missed PeopleSoft patch

The FBI removed an Accenture contractor after a missed patch on a third-party platform. Reuters ties that platform to Oracle PeopleSoft and ShinyHunters.

Cybersecurity

Oct 6, 2026

Atlassian CVE-2026-21589: unauthenticated file read on 8 products

Matthews Enterprises (PTY) LTD, Francois Matthews

Atlassian CVE-2026-21589: unauthenticated file read on 8 products

CVE-2026-21589 lets anyone who can reach a self-hosted Atlassian instance read a file if they already know its name. Eight Data Center products are affected.

Cybersecurity

Oct 6, 2026

ClickFix cache smuggling bypasses the Windows Run character limit

Matthews Enterprises (PTY) LTD, Francois Matthews

ClickFix cache smuggling bypasses the Windows Run character limit

Compromised sites preload a fake image into the browser cache. A short Run command then executes that cached script and skips the usual download.

Cybersecurity

Oct 6, 2026

HPE iLO 7 CVE-2026-79820 scores 9.0 on user validation

Matthews Enterprises (PTY) LTD, Francois Matthews

HPE iLO 7 CVE-2026-79820 scores 9.0 on user validation

HPE iLO 7 firmware 1.25.00 has a remote user-validation failure scored 9.0. Treat the management interface as a production admin path.

Cybersecurity

Oct 6, 2026

Cling botnet hides operator commands inside STUN traffic

Matthews Enterprises (PTY) LTD, Francois Matthews

Cling botnet hides operator commands inside STUN traffic

Attackers are exploiting a 2021 Realtek flaw to drop Cling, a botnet that hides operator commands inside ordinary STUN traffic.

Cybersecurity

Oct 6, 2026

Exchange CVE-2026-96940: signed-in users can read other mailboxes

Matthews Enterprises (PTY) LTD, Francois Matthews

Exchange CVE-2026-96940: signed-in users can read other mailboxes

A signed-in Exchange user can read other mailboxes in the same organization. On-prem servers need the September 2026 V2 update. Online is already fixed.

Cybersecurity

Oct 6, 2026

Prev
10
11
12
13
14
Next