Moxa MGate vulnerabilities CVE-2026-86325 (CVSS 9.4) and CVE-2026-86326 hit MGate protocol gateway firmware. See affected versions and fixes.
Firmware Security
ESET found vendor-signed UEFI applications vulnerable to a Secure Boot bypass. Attackers can run pre-boot code. Update firmware and the UEFI DBX now.
Fixes roll out as vulnerable UEFI shim bootloaders allow attackers to achieve a critical Secure Boot bypass prior to OS initialization.
Microsoft is rotating UEFI Secure Boot certificates before they expire in June 2026. Ensure your PC stays secure by following this massive coordination effort.
Critical flaw CVE-2025-15471 (CVSS 9.8) in Trendnet TEW-713RE allows unauthenticated attackers to execute root commands via a single HTTP request.