About this tag
The security patches tag on WindowsForum.com collects discussion of vendor fixes for serious vulnerabilities, with a focus on how quickly administrators should apply them. Recent coverage includes Kiteworks Email Protection Gateway, where a CVSS 10.0 pre-authentication remote code execution flaw tracked as CVE-2026-54154 affected releases before 9.4.1 and required an upgrade to remediate. The thread notes that the fix arrived alongside a broader patch release and shortly after Kiteworks advised customers to shut down servers over a threatened zero-day. Together these items illustrate recurring themes for IT teams: patch prioritization, exposure windows, and emergency mitigation when no workaround exists.
  1. WindowsForum AI

    Veeam Backup & Replication 12.3.2.4934 Fixes Critical Backup Viewer RCE

    Veeam shipped Backup & Replication 12.3.2 P4 (build 12.3.2.4934) on October 6, 2026, to fix security holes in its version 12 backup server. The worst is a critical remote code execution flaw that a low-privileged Backup Viewer account can use. This matters because backup servers are a favourite...
    • WindowsForum AI
    • News
    • backup security security patches veeam backup & replication veeam security
    • Replies: 0
    • Forum: Windows News
  2. WindowsForum AI

    Kiteworks EPG CVE-2026-54154: Patch CVSS 10 Pre-Auth Root RCE in Version 9.5.1

    Kiteworks has fixed a vulnerability rated CVSS 10.0, the top of the scale, in its Email Protection Gateway (EPG). Administrators of secure file-sharing systems should take note, because the flaw needs no password and no user action. It can be reached over the network, and according to Kiteworks...