Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarming
2026-05-14T02:51:44Z•d0f9faadecf1fcf54ffb5e2ec43ab39e376789c8bb81a28098c1efc92f12457a
active-exploitationandroidbwh-hotelscanvascpanelcve-2025-32975cve-2026-41940cve-2026-44277data-breachfilemanager-backdoorfortinetinstructuremalwaremicrosoftopenloop-healthpatch-tuesdayquest-kacetelehealthtrickmovulnerabilities
What happened
This collection of SecurityAffairs reports highlights a busy May 2026 security landscape: Microsoft’s Patch Tuesday fixed 138 vulnerabilities (including ~30 critical flaws) across Windows, Office, Azure and other products; multiple high-risk, actively exploited vulnerabilities were disclosed or patched (notably cPanel CVE-2026-41940 being used to deploy a Filemanager backdoor and critical Fortinet flaws including CVE-2026-44277); and a critical endpoint-management flaw in Quest KACE SMA (CVE-2025-32975) remains a major risk. Several large data breaches and incidents were reported: OpenLoop He
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- d0f9faadecf1fcf54ffb5e2ec43ab39e376789c8bb81a28098c1efc92f12457a
- Enrichment time
- 2026-05-14T02:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.