Attackers Target Unpatched Roundcube Servers With CVE-2026-48842

2026-09-26T08:51:39Z•885ebfcf47eb7bce66269a1f76948f1cb201fe5d8d5f032fa3c67e1c0502854b

CVE-2026-48842CVE-2026-58704CVE-2026-87902AI safetyAndroidCISA KEVGoogle ChromeIoT securityMFAMicrosoft 365PixelRoundcubeWordPressactive exploitationdeepfakespasskeyspatchingphishingprivacyransomwareremote code executionvulnerability managementzero-day

Open source link →

What happened

TechRepublic security feed highlights active exploitation of multiple critical vulnerabilities, including CVE-2026-48842 in unpatched Roundcube servers, CVE-2026-87902 in WordPress with potential remote code execution, and CVE-2026-58704, a Pixel modem zero-day added to CISA KEV. It also covers Chrome 154 security fixes, phishing campaigns abusing passkey and MFA updates, IoT and surveillance-device compromise, ransomware and deepfake threats, and broader privacy and AI-safety concerns.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: techrepublic_security
Record identifier: 885ebfcf47eb7bce66269a1f76948f1cb201fe5d8d5f032fa3c67e1c0502854b
Enrichment time: 2026-09-26T08:51:39Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records