Our blog | Matthews Enterprises

12 Articles

Cybersecurity ×

Dell DSU CVE-2026-86360 (CVSS 9.6) root on PowerEdge updates

Matthews Enterprises (PTY) LTD, Francois Matthews

Dell DSU CVE-2026-86360 (CVSS 9.6) root on PowerEdge updates

Dell advisory DSA-2026-324 covers five DSU flaws. CVE-2026-86360, CVSS 9.6, can let an unauthenticated remote attacker run code as root. No in-the-wild attacks reported.

Cybersecurity

Oct 6, 2026

FortiMail CVE-2026-104286 (CVSS 9.8) file-write zero-day

Matthews Enterprises (PTY) LTD, Francois Matthews

FortiMail CVE-2026-104286 (CVSS 9.8) file-write zero-day

Fortinet says CVE-2026-104286 is exploited. Unauthenticated attackers can write files on the FortiMail host. Fixes for 7.4, 7.6, and 8.0 were still upcoming.

Cybersecurity

Oct 6, 2026

Atlassian CVE-2026-21589 (CVSS 9.3) file read on 8 products

Matthews Enterprises (PTY) LTD, Francois Matthews

Atlassian CVE-2026-21589 (CVSS 9.3) file read on 8 products

Atlassian disclosed CVE-2026-21589 on 5 October. An unauthenticated attacker who knows a file path can read it from eight self-hosted Data Center products.

Cybersecurity

Oct 6, 2026

NetScaler CVE-2026-88779 (CVSS 8.7) crashes SAML appliances

Matthews Enterprises (PTY) LTD, Francois Matthews

NetScaler CVE-2026-88779 (CVSS 8.7) crashes SAML appliances

Citrix confirmed targeted attacks against SAML NetScaler ADC and Gateway builds. CISA wants the patch applied by 7 October 2026.

Cybersecurity

Oct 6, 2026

CVE-2026-88779: NetScaler SAML crash, KEV due 7 October

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-88779: NetScaler SAML crash, KEV due 7 October

CVE-2026-88779 can crash SAML on NetScaler ADC and Gateway. CISA set a 7 October federal deadline. Upgrade and triage.

Cybersecurity

Oct 6, 2026

FBI removes Accenture contractor after missed PeopleSoft patch

Matthews Enterprises (PTY) LTD, Francois Matthews

FBI removes Accenture contractor after missed PeopleSoft patch

The FBI removed an Accenture contractor after a missed patch on a third-party platform tied to a ShinyHunters theft of employee data.

Cybersecurity

Oct 6, 2026

CVE-2026-104286: FortiMail unauthenticated file write, CVSS 9.8

Matthews Enterprises (PTY) LTD, Francois Matthews

CVE-2026-104286: FortiMail unauthenticated file write, CVSS 9.8

CVE-2026-104286, CVSS 9.8, is exploited in the wild. Unauthenticated HTTP writes files on FortiMail. Apply the workaround and hunt.

Cybersecurity

Oct 6, 2026

Rejetto HFS CVE-2026-61500: scanners forging admin sessions, CVSS 9.3

Matthews Enterprises (PTY) LTD, Francois Matthews

Rejetto HFS CVE-2026-61500: scanners forging admin sessions, CVSS 9.3

Scanners are probing Rejetto HFS for CVE-2026-61500, a session-forgery bug that leads to admin access and remote code execution on versions 3.0.0 through 3.2.0.

Cybersecurity

Oct 6, 2026

FBI removes Accenture contractor after a missed PeopleSoft patch

Matthews Enterprises (PTY) LTD, Francois Matthews

FBI removes Accenture contractor after a missed PeopleSoft patch

The FBI removed an Accenture contractor after a missed patch on a third-party platform. Reuters ties that platform to Oracle PeopleSoft and ShinyHunters.

Cybersecurity

Oct 6, 2026

Atlassian CVE-2026-21589: unauthenticated file read on 8 products

Matthews Enterprises (PTY) LTD, Francois Matthews

Atlassian CVE-2026-21589: unauthenticated file read on 8 products

CVE-2026-21589 lets anyone who can reach a self-hosted Atlassian instance read a file if they already know its name. Eight Data Center products are affected.

Cybersecurity

Oct 6, 2026

ClickFix cache smuggling bypasses the Windows Run character limit

Matthews Enterprises (PTY) LTD, Francois Matthews

ClickFix cache smuggling bypasses the Windows Run character limit

Compromised sites preload a fake image into the browser cache. A short Run command then executes that cached script and skips the usual download.

Cybersecurity

Oct 6, 2026

HPE iLO 7 CVE-2026-79820 scores 9.0 on user validation

Matthews Enterprises (PTY) LTD, Francois Matthews

HPE iLO 7 CVE-2026-79820 scores 9.0 on user validation

HPE iLO 7 firmware 1.25.00 has a remote user-validation failure scored 9.0. Treat the management interface as a production admin path.

Cybersecurity

Oct 6, 2026

Prev
13
14
15
16
17
Next