---

⚠ Microsoft Desktop Window Manager Vulnerability Exploited

Vulnerability Level: 🟠 Important — Active Exploitation
Incident Summary: Microsoft addressed a vulnerability in Windows Desktop Window Manager that was reported as exploited in the wild.
Attack Vector: CVE-2026-20805 | Local exploitation | Memory information disclosure
Potential Impact: Exposure of memory-address information | Support for further exploitation | Security-control bypass
Defence: Deploy the January Microsoft security updates, verify endpoint patch compliance, and review affected Windows systems for suspicious activity.

---

⚠ Fortinet Authentication Bypass Under Active Attack

Vulnerability Level: 🔴 Critical — Active Exploitation
Incident Summary: Fortinet reported exploitation of an authentication-bypass vulnerability affecting administrative access to vulnerable enterprise security products.
Attack Vector: CVE-2026-24858 | Authentication bypass | Exposed management services
Potential Impact: Unauthorised administrative access | Configuration theft | Persistent device compromise
Defence: Upgrade affected products, restrict management interfaces, review administrative logins, and investigate unexpected configuration changes.

---

⚠ Microsoft Office Security Feature Bypass Exploited

Vulnerability Level: 🟠 High — Active Exploitation
Incident Summary: A Microsoft Office security-feature bypass vulnerability was reported as actively exploited and added to the CISA Known Exploited Vulnerabilities catalogue.
Attack Vector: CVE-2026-21509 | Crafted Office content | Security-control bypass
Potential Impact: Malicious content execution | Endpoint compromise | Bypass of document protections
Defence: Apply Microsoft Office updates, restrict untrusted documents, and monitor Office applications for unusual child-process activity.

---

⚠ SmarterMail Authentication Bypass Enables Administrator Takeover

Vulnerability Level: 🔴 Critical — Active Exploitation
Incident Summary: An authentication-bypass vulnerability in SmarterMail could allow unauthenticated attackers to reset the system administrator password on affected servers.
Attack Vector: CVE-2026-23760 | Crafted HTTP request | Password-reset abuse
Potential Impact: Administrator account takeover | Mail-server compromise | Credential and message exposure
Defence: Upgrade to the vendor-recommended build, restrict administrative access, rotate administrator credentials, and review password-reset and login activity.

---

⚠ Oracle January Critical Patch Update

Vulnerability Level: 🔴 Critical
Incident Summary: Oracle released its January Critical Patch Update covering vulnerabilities across database, middleware, Java, MySQL, and enterprise application products.
Attack Vector: Multiple CVEs | Network-accessible services | Product-specific vulnerabilities
Potential Impact: Unauthorised access | Data exposure | Service disruption | Remote system compromise
Defence: Inventory affected Oracle products, review the applicable risk matrices, prioritise remotely exploitable vulnerabilities, and test cumulative patches before production deployment.

---

Shilpa Sayura Cyber Defence Research Lab

Editorial Note: This digest provides an intelligence starting point. Security teams should confirm product exposure and consult official vendor advisories before taking remediation action.