972 fixes in one Patch Tuesday, and two were already exploited
Future
Technology
New article published
Security
972 fixes in one Patch Tuesday, and two were already exploited
September 2026 Patch Tuesday covered 972 vulnerabilities, 113 of them critical, with two zero-days under active exploitation. Here is the order to patch in.
Key Takeaways
- September 2026 Patch Tuesday covered 972 vulnerabilities, 113 rated critical, with two zero-days already being exploited in the wild.
- CVE-2026-73009 is an unauthenticated remote code execution flaw in the Windows SSTP service rated 9.8. Patch it first.
- SonicWall SMA 1000 gateways carry CVE-2026-83548, a pre-authentication SSRF rated a full 10.0.
- Both of the worst flaws sit at the network edge, which is exactly where small networks patch least often.
You received this because you subscribe to Future Technology.