Less panic patching, more precision

This Cisco Talos RSS batch aggregates multiple May 2026 posts covering vulnerability research, active exploitation, and threat intelligence. Notable items include active exploitation of an authentication bypass in Cisco Catalyst SD‑WAN (CVE-2026-20182), heap-based buffer overflow discoveries in MediaArea's MediaInfoLib, a DICOM/Pydicom/GDCM/Orthanc heap overflow case study, multiple vendor disclosures (TP‑Link, Adobe Photoshop, OpenVPN, Norton VPN), Microsoft’s May 2026 Patch Tuesday (137 vulnerabilities, 16 marked critical), and threat reporting on APT group UAT-8302, BadIIS MaaS activity, as