Two High-Severity Vulnerabilities Disclosed: CVE-2026-76955 and CVE-2026-107441
Article Content
- •CVE-2026-76955 and CVE-2026-107441 both have a CVSS score of 8.8, indicating high severity.
- •Both vulnerabilities can be exploited via adjacent networks without user interaction.
- •No active exploitation has been reported for these vulnerabilities as of now.
On November 3, 2026, two vulnerabilities, CVE-2026-76955 and CVE-2026-107441, were published, both rated with a CVSS score of 8.8, indicating high severity. These vulnerabilities can be accessed via adjacent networks and require no user interaction or privileges to exploit. The impact on confidentiality, integrity, and availability is rated as high, posing significant risks to affected systems. Organizations are urged to review their security measures and apply any available patches. As of now, there are no reports of in the wild for these vulnerabilities, but the potential for such exploitation exists. Detailed references to solutions and tools are provided in the advisories.
Ask AI about this cluster
Answers cite the sources they use
More articles in this cluster (2)
Following this threat?
Track CVE-2026-107441 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What systems are affected by these CVEs?
Are there any patches available for these vulnerabilities?
Is there any indication of active exploitation?
Continue Reading
Out-of-Bounds Write Vulnerability in Zyxel GS1900 Series Switches An out-of-bounds write vulnerability (CVE-2026-107441) has been identified in the CGI program of Zyxel GS1900 series switches, allowing unauthenticated adjacent attackers to execute arbitrary OS commands via crafted HTTP requests. The vulnerability affects firmware versions through 2.90(AAHK.2)C0. Zyxel has released…
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…