Critical Enterprise, IoT, Mobile, and Endpoint Devices Require Immediate Patching

Urgent exposure includes Arista’s actively exploited, unauthenticated CVSS 10.0 VeloCloud Orchestrator vulnerability, NSA guidance to patch PHP vulnerabilities linked to PHP2Shell, and a Siemens Software Center DLL search-path flaw below 4.0.9.8 with an exploitation signal. Apple’s October 26 updates reportedly address at least 329 vulnerabilities, and Apple says CVE-2026-86950 may have been exploited in targeted attacks on older iOS versions. Ubuntu Touch updates also reportedly fix flaws enabling root command execution or file access; users should install applicable updates and verify advisories.