CVE Tools
Track your stack

Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026

Help Net SecurityBy Anamarija Pogorelec

Roundup

Our summary

This weekly digest covers several major security developments, including a critical vulnerability in Cisco Integrated Management Controller (CVE-2026-20200) that allows root-level command execution and has a publicly available proof-of-concept exploit. Attackers are also actively leveraging an authentication bypass flaw in N-able N-central (CVE-2026-18577) to compromise managed endpoints. Additionally, the report details significant outcomes from Black Hat USA 2026, such as a pre-authentication remote code execution vulnerability in Bonita BPM and updates regarding EU AI Act enforcement.

Read at Help Net Security

Help Net Security publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS HijacksCVE-2026-18577, CVE-2026-66066
  2. The Hacker NewsN-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE FlawCVE-2026-18577
  3. The Hacker NewsAttackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 ActivityCVE-2026-66066
  4. SecurityWeekCritical Ruby on Rails Vulnerability in Attackers’ CrosshairsCVE-2026-66066
  5. Help Net SecurityWeek in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-dayCVE-2026-18577
  6. Хакер (xakep.ru)N-able выпустила уже два патча для уязвимости обхода аутентификации в N-centralCVE-2026-18577
  7. BleepingComputerNew StormEncryptor ransomware used by former Medusa affiliateCVE-2026-18577
  8. The Hacker NewsChina-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central FlawCVE-2026-18577
  9. The Hacker News⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router BackdoorsCVE-2026-18577
  10. Help Net SecurityN-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577CVE-2026-18577

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store