WatchGuard fixes critical Fireware OS flaw allowing remote code execution

2026-10-01T02:51:36Z•766ef95a5eb789d9db18cc1e7f17d47449ee3f616804d9adc579a32b0d8defc3
CVE-2026-86131CVE-2026-86950CVE-2026-88772AI-securityAppleCISA-KEVChatGPTCitrix-NetScalerCoreGraphicsFireware-OSPentagonRATShinyHuntersWatchGuardactively-exploitedcritical-infrastructurecybercrimedata-breachmalware-deliveryrailwayransomwareremote-code-executionsupply-chain-securitythreat-intelligencevulnerabilityzero-day

What happened

Security news covering critical and actively exploited vulnerabilities, including WatchGuard Fireware OS RCE (CVE-2026-86131), an Apple CoreGraphics zero-day (CVE-2026-86950) added to CISA KEV, and an actively exploited Citrix NetScaler zero-day (CVE-2026-88772). The feed also reports ransomware and data breaches affecting Japanese railway operators and a U.S. Pentagon personnel agency, abuse of ChatGPT Custom GPTs to deliver a RAT, investigations involving ShinyHunters and Oxygen Forensics, and research into unsafe AI model behavior.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
766ef95a5eb789d9db18cc1e7f17d47449ee3f616804d9adc579a32b0d8defc3
Enrichment time
2026-10-01T02:51:36Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.