March 23, 2026 vulnerability digest: Oracle emergency patch, Windchill CVSS 10 zero-day
Oracle's emergency patch fixes a CVSS 9.8 pre-auth RCE in Identity Manager. PTC Windchill carries a CVSS 10.0 zero-day with webshell IOCs but no patch. Langflow AI pipelines were exploited within 20 hours of disclosure. Two Chrome zero-days hit CISA …
Read more →