Critical RCE Vulnerabilities Under Active Exploitation

Multiple critical vulnerabilities are currently being exploited, including remote code execution (RCE) flaws in HPE AOS-CX (CVE-2026-73749), Citrix NetScaler (CVE-2026-19490), Sangoma Switchvox (CVE-2026-9586), and Elementor Pro (CVE-2026-32475). A zero-day vulnerability in Google Chrome (CVE-2026-85046) is also under active exploitation. Organizations using affected systems are at significant risk of data breaches and unauthorized access. Additionally, a phishing campaign is utilizing invisible Unicode characters to bypass email filters, increasing the risk of credential theft. The ongoing exploitation of these vulnerabilities underscores the need for immediate patching and enhanced detection measures. The situation is compounded by the recent data breach at IDScan, affecting over 153 million driver's licenses. Security teams must prioritize addressing these vulnerabilities to mitigate potential impacts.

Key Points: • Multiple critical RCE vulnerabilities are actively exploited, affecting various platforms. • A zero-day vulnerability in Google Chrome is among the active threats this week. • Organizations are urged to patch vulnerabilities immediately to prevent data breaches.