Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild

Security Affairs RSS covers active exploitation of multiple high-impact vulnerabilities, including Roundcube SQL injection CVE-2026-48842, Citrix NetScaler zero-days enabling remote code execution, and CISA KEV additions affecting WordPress, Microsoft SharePoint, and MikroTik RouterOS. The feed also includes reporting on cybercrime marketplaces, ransomware ecosystem history, malware, and unauthorized AI-agent activity. The most urgent items are the in-the-wild exploitation and zero-day reports, particularly the CISA-listed flaws and remotely exploitable NetScaler vulnerabilities.