All advisories
Edge devices remain the most exploited entry point. Treat vendor security updates for them as emergency changes.
1 min read
Severity: CriticalAct now: exploitation is active or imminent.
Severity
Critical
Published
12 November 2026
Affected
- VPN gateways
- firewalls
- load balancers
- remote-access appliances
CVE IDs
No specific CVE IDs.
Why it matters
Attackers scan the internet for vulnerable edge devices within hours of a vendor advisory. Once inside, they move laterally with legitimate credentials.
What to do
- Keep an up-to-date inventory of every internet-facing device and its firmware version.
- Subscribe to vendor security bulletins and your national CERT alerts.
- Apply critical updates within 48 hours; if you can't, restrict management interfaces to a trusted network.
- After patching, review logs for signs of compromise that happened before the fix.
Patching closes the door. It doesn't tell you whether someone already walked in.
Need help with this?
We'll check whether your systems are exposed, set priorities, and help your team remediate.