Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
2026-11-10T19:23:59Z•54762329a9b4ed9c31be61b557ebe341e9c917dc40633291fc1340265b0c8996
CVE-2026-124194AI securityAdobeIAM credentialsICM2SHELLMicrosoft OutlookMicrosoft Patch TuesdayN-able N-centralProxyGateQuboleSAPSBOMactive exploitationcredential theftdata breachremote code executionsupply-chain attackvulnerability disclosurezero-day
What happened
SecurityWeek reports multiple major cybersecurity developments, led by an actively exploited Microsoft Outlook zero-day (CVE-2026-124194) among 1,094 Microsoft fixes. Other coverage includes critical SAP vulnerabilities, 110 Adobe fixes, an N-able N-central shutdown following disclosure of more than 30 zero-days enabling remote code execution and credential theft, and a Qubole supply-chain compromise involving stolen IAM credentials and sensitive customer data.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 54762329a9b4ed9c31be61b557ebe341e9c917dc40633291fc1340265b0c8996
- Enrichment time
- 2026-11-10T19:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.