Our blog | Matthews Enterprises

Our blog

TeamViewer 15.83 fixes CVE-2026-92372, a CVSS 8.8 decoder RCE

Matthews Enterprises (PTY) LTD, Francois Matthews

TeamViewer 15.83 fixes CVE-2026-92372, a CVSS 8.8 decoder RCE

Three TeamViewer client flaws fixed in 15.83: code execution from crafted screen data, a heap overflow, and root escalation on macOS.

Cybersecurity

Oct 28, 2026

WatchGuard Fireware 2026.4 fixes 18 Firebox flaws, seven at 9.1 or higher

Matthews Enterprises (PTY) LTD, Francois Matthews

WatchGuard Fireware 2026.4 fixes 18 Firebox flaws, seven at 9.1 or higher

WatchGuard published 18 Firebox advisories on 27 October, seven rated 9.1 or higher on CVSS 4.0. Three of them are reachable without a login.

Cybersecurity

Oct 28, 2026

Veeam Backup & Replication CVE-2026-108142: unauthenticated bypass, CVSS 9.1

Matthews Enterprises (PTY) LTD, Francois Matthews

Veeam Backup & Replication CVE-2026-108142: unauthenticated bypass, CVSS 9.1

An unauthenticated attacker can bypass authorization on Veeam's CDP Coordinator Service in Backup & Replication 13.1 and 13.0. Veeam fixed it on 27 October alongside a critical flaw in its Microsoft 365 backup product.

Cybersecurity

Oct 28, 2026

eMudhra root removal: Windows KB5134133 distrusts seven certificates

Matthews Enterprises (PTY) LTD, Francois Matthews

eMudhra root removal: Windows KB5134133 distrusts seven certificates

Eight intermediate keys generated in April 2025 had values below 256, so anyone could rebuild them and forge certificates. The fix targets PCs that miss automatic trust updates.

Cybersecurity

Oct 28, 2026

Chrome 156.0.8078.73 fixes four critical flaws reachable from a web page

Matthews Enterprises (PTY) LTD, Francois Matthews

Chrome 156.0.8078.73 fixes four critical flaws reachable from a web page

Four of the 52 fixes in Chrome 156.0.8078.73 are rated Critical, including one that reaches code execution outside the sandbox. No exploitation reported yet.

Cybersecurity

Oct 28, 2026

Brotli CVE-2026-111497: .NET, PowerShell and PAN-OS ship fixes for the decoder overflow

Matthews Enterprises (PTY) LTD, Francois Matthews

Brotli CVE-2026-111497: .NET, PowerShell and PAN-OS ship fixes for the decoder overflow

Microsoft fixed .NET, Visual Studio and PowerShell on 25 October, and Palo Alto added PAN-OS on 26 October. The decoder ships inside dozens of products that bundle their own copy.

Cybersecurity

Oct 27, 2026

PHP2Shell CVE-2026-109618 and CVE-2026-109619 added to CISA KEV after confirmed RCE

Matthews Enterprises (PTY) LTD, Francois Matthews

PHP2Shell CVE-2026-109618 and CVE-2026-109619 added to CISA KEV after confirmed RCE

CISA added both PHP2Shell flaws to its exploited-vulnerability catalog after a honeypot recorded working code execution. PHP 8.2, 8.3, 8.4 and 8.5 all need patching.

Cybersecurity

Oct 27, 2026

Microsoft Authenticator CVE-2026-80097: any Android app could pull your work tokens

Matthews Enterprises (PTY) LTD, Francois Matthews

Microsoft Authenticator CVE-2026-80097: any Android app could pull your work tokens

An app with no permissions could impersonate Teams and ask Authenticator for delegated tokens, reaching mail, files and calendar. Microsoft rates it 8.6 and fixed it in 6.2606.4246.

Cybersecurity

Oct 27, 2026

Fake IT support on Teams: 400+ incidents, payload running in under 15 minutes

Matthews Enterprises (PTY) LTD, Francois Matthews

Fake IT support on Teams: 400+ incidents, payload running in under 15 minutes

Over 400 incidents share the same script: mail bombing, a Teams chat from "IT Support (Internal)", Quick Assist, then a backdoor and ransomware. No vulnerability is involved.

Cybersecurity

Oct 27, 2026

Rand Mutual investigates claimed 366GB claims data theft, 5 November leak deadline

Matthews Enterprises (PTY) LTD, Francois Matthews

Rand Mutual investigates claimed 366GB claims data theft, 5 November leak deadline

A threat actor claims 366GB of claims records and 593,786 files from Rand Mutual Assurance, and wants $95,000 before 5 November. The insurer says the investigation is still running.

Cybersecurity

Oct 27, 2026

ACF Extended 0.9.2.8 fixes CVSS 9.0 unauthenticated RCE and admin takeover

Matthews Enterprises (PTY) LTD, Francois Matthews

ACF Extended 0.9.2.8 fixes CVSS 9.0 unauthenticated RCE and admin takeover

Advanced Custom Fields: Extended below 0.9.2.8 carries an unauthenticated remote code execution flaw scored 9.0 and two account takeover paths. Sites using its front-end forms are exposed.

Cybersecurity

Oct 27, 2026

Apple backports CVE-2026-86950 zero-day to iPhone XS, XR and older iPads

Matthews Enterprises (PTY) LTD, Francois Matthews

Apple backports CVE-2026-86950 zero-day to iPhone XS, XR and older iPads

Apple has extended its September CoreGraphics zero-day fix to iPhone XS, XR and older iPads. Devices that cannot reach iOS 27 were left exposed until this week.

Cybersecurity

Oct 27, 2026

Prev
4
5
6
7
8
Next