⚡ THE ONE THING TODAY
Immediately audit and prioritize patching all Fortinet FortiMail instances — this is CISA-tracked active exploitation, not optional.
Microsoft Patch Tuesday October 2026: Exchange Server EoP + Critical Azure/Dataverse RCEs Patched
Microsoft's October 2026 Patch Tuesday (released 13 October) addresses 8 CVEs across Azure, Apps, and Microsoft Dynamics — 7 rated Critical. Priority fixes include CVE-2026-77900 (Azure App Service RCE, CVSS 9.8) and CVE-2026-88131 (Microsoft Dataverse RCE, CVSS 9.8), plus CVE-2026-96940 (Exchange Server Elevation of Privilege, CVSS 8.8, rated 'More Likely' to be exploited). No active exploitation is confirmed this month; however, patch Exchange Server immediately given the EoP rating.
Microsoft 365 West US Network Failure Causes Multi-Service Outage — Now Resolved
A West US network failure triggered widespread disruption across Outlook, Teams, SharePoint, OneDrive, Copilot, and Azure services, with thousands of users reporting problems. Microsoft's Service Health dashboard confirmed degradation across multiple services through specific network paths; the outage has since been resolved. Workaround during the incident: route critical workflows through mobile apps or cached data where possible.
Ghostscript CVE-2026-39919 (CVSS 9.8): PDF Uploads Can Trigger Remote Code Execution
A critical vulnerability in Ghostscript (versions 9.21 through 10.07.1) allows attackers to achieve remote code execution by uploading a specially crafted PDF file when the OpenJPEG decoder is present. Disclosed October 12, 2026, the flaw is patched in Ghostscript 10.08.0; Ubuntu 22.04/24.04/26.04 and AlmaLinux 10 have issued fixes, while Debian 12 remains vulnerable. MSPs managing Linux servers or document processing pipelines should update Ghostscript immediately.
Fortinet FortiMail Path Traversal CVE-2026-104286 Added to CISA KEV
A path traversal vulnerability in Fortinet FortiMail 8.0.0 and related versions (CVE-2026-104286, CVSS 9.8) was added to the CISA Known Exploited Vulnerabilities catalog on October 1, 2026. Confirmed exploitation in the wild makes this an urgent priority for any environment running FortiMail. Update to a patched FortiMail version immediately; restrict management interface access as an interim measure.
SonicWall SMA1000 SQL Injection CVE-2026-4112 Patched — Privilege Escalation Risk
SonicWall patched a high-severity SQL injection vulnerability (CVE-2026-4112) in its SMA1000 series, which could allow an attacker with read-only admin privileges to obtain full primary admin rights. Three additional flaws were also addressed, covering SSL VPN credential enumeration and TOTP authentication bypass. SonicWall reports no confirmed exploitation but urges immediate firmware updates given the platform's history as a ransomware target.
blueAPACHE Launches Managed Service for AI-Era Operations
Australian MSP blueAPACHE launched a new managed service specifically designed for AI-era IT operations, announced October 2, 2026. The offering is positioned to help customers manage the infrastructure and governance demands of running AI workloads in production. This follows blueAPACHE's shortlisting for MSP of the Year at the CRN Channel Awards Australia 2026.
This is what you get — free, in your inbox.
Subscribers also get the full “From the Floor” take with every issue — not just the summary you just read.
Written from 12 years on the helpdesk floor. Always free.