Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A heap-based buffer overflow and an information-exposure bug in FortiOS, both confirmed exploited in 2026, span version ranges reaching back through years of release history.
Three different Cisco product lines — Secure Email Gateway, Firewall ASA/FTD, and Unified Communications Manager — each had a vulnerability confirmed exploited between June and September 2026.
Ubiquiti UniFi OS had three CVSS 10.0 vulnerabilities — command injection, path traversal, and access control failure — all confirmed exploited on the same day in June 2026.
Two memory-safety bugs in Chrome's V8 engine — out-of-bounds write and type confusion — both confirmed exploited within V8's sandbox in early September 2026.
CVE-2026-60004, remote code execution in Gitea via the diffpatch API and Git hook installation, went from disclosure to confirmed exploitation in roughly 24 hours.
CVE-2026-59310, a directory traversal vulnerability in vCenter's Syslog server leading to code execution, carries CISA's confirmed ransomware campaign flag.
A Microsoft SQL Server RCE from 2019 and an ownCloud authentication bypass from 2023 both entered CISA's KEV catalogue in the same week of August 2026 — years after their original disclosure.
CVE-2026-21962, an access control failure in the Oracle HTTP Server / WebLogic Server Proxy Plug-in, went from January disclosure to August KEV confirmation — seven months later.
CVE-2026-75650, a server-side template injection in Adobe Commerce and Magento, was confirmed exploited within 24 hours of its NVD publication.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
