|
|
| FortiGuard Labs | FortiGuard Center - Outbreak Alerts |
GitLab Path Traversal Vulnerability
FortiGuard Labs has observed attack activity targeting CVE-2026-85706, a critical path traversal vulnerability in GitLab Community Edition and Enterprise Edition. The vulnerability affects the repository commits API and can allow an unauthenticated remote attacker to read arbitrary files from a vulnerable GitLab server due to improper path confinement and missing authentication enforcement. The vulnerability carries a CVSS score of 10.0 and requires no privileges or user interaction.
CVE-2026-85706 was added to the CISA Known Exploited Vulnerabilities catalog on September 11, 2026. Public exploit and proof-of-concept material has also emerged, increasing the potential for exploitation against exposed, unpatched GitLab instances. |
Orkes Conductor Evaluator Remote Code Execution
Attackers are actively targeting Orkes Conductor servers vulnerable to CVE-2026-58138, a critical unauthenticated remote code execution vulnerability in its GraalVM script evaluators. FortiGuard telemetry is observing active attack attempts targeting vulnerable Orkes Conductor deployments.
The vulnerability allows an unauthenticated attacker to submit a malicious workflow definition containing JavaScript or Python expressions to the Conductor workflow API. Because vulnerable evaluators can be configured with unrestricted host access, the attacker can escape the intended scripting environment and execute arbitrary operating system commands with the privileges of the Conductor process.
Public proof-of-concept exploit code is available, including a working exploit targeting Conductor v3.23.0. Exploit material has also been published through Exploit-DB, increasing the likelihood of opportunistic scanning and exploitation of exposed deployments. |
QuickFox Supply Chain Attack
FortiGuard Labs has uncovered a long-running supply chain compromise targeting QuickFox, a Windows VPN/network acceleration application primarily used by overseas Chinese users. Attackers tampered with official Windows installers to deploy a custom backdoor tracked as FDMTP, enabling selective victim profiling and post-compromise access. The campaign has reportedly been active since August 2025 before being publicly disclosed in August 2026. |
| | Distributed by aarss.com. |
|
|
|
|
Welcome to Joe's Cable.
Leading provider of structured
cabling services. Providing Data, and Voice Cable Systems, as well as
Audio, and Video Cabling services. Among our extensive
cabling services, our technicians are Certified in
Network Systems Administration, and PC Repair. Have a look in our
Services Section for a complete list of
services that we offer.We provide services to small, medium, and
large businesses, as well as Residential Customers. We understand the
importance of everyone's cabling needs, so we offer great pricing plans
for all of our clients. Once you have a cable system installed by Joe's
Cable, you can be assured that your wiring needs will be fulfilled. No job is too big, or too small.
Give us a call today to set up an appointment. |
|