CVE-2026-86950

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 29, 2026

Last Seen

November 6, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Zero-Day Exploits Target Citrix and Other Major Platforms80.0

Recent reports indicate multiple critical vulnerabilities are being actively exploited, including zero-day exploits for Citrix NetScaler ADC and Gateway (CVE-2026-88771, CVE-2026-88772) and PaperCut NG/MF. The vulnerabilities allow unauthenticated remote code execution, posing significant risks to a...

Critical FortiMail Vulnerability Actively Exploited in the Wild78.8

Fortinet has disclosed a critical vulnerability in FortiMail, tracked as CVE-2026-104286, with a CVSS score of 9.8. This path traversal vulnerability allows unauthenticated attackers to write arbitrary files on affected systems via crafted HTTP or HTTPS requests. The flaw has been confirmed to be ac...

Apple Patches CoreGraphics Zero-Day Exploited in Targeted Attacks72.9

Apple has released emergency updates for iOS, iPadOS, and macOS to address a critical zero-day vulnerability, CVE-2026-86950, in its CoreGraphics framework. This out-of-bounds write flaw can allow arbitrary code execution when a device processes a maliciously crafted file. The vulnerability was repo...

PHP2Shell Vulnerabilities Threaten 70% of Websites with Remote Code Execution72.9

The PHP2Shell vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, pose a critical threat to approximately 70% of websites globally, allowing unauthenticated remote code execution. Discovered by the security firm Calif using AI, these flaws were leaked before a scheduled patch on Octo...