4 min read
WordPress Core CVE-2026-63030: patch 7.0.1 and older branches now
Critical unauthenticated RCE (wp2shell) hits WordPress 7.0.0–7.0.1 and 6.9.0–6.9.4. What the CVEs mean, which versions are fixed, and what SMBs should do today.
#cve
4 articles
5 min read
July 2026 Patch Tuesday: when AI discovery floods the CVE queue
Microsoft's record July 2026 release reflects AI-assisted vulnerability discovery. What MSPs and SMBs should change in triage without freezing from volume anxiety.
1 min read
How we triage critical CVEs for clients
A look at Qutzl’s patch priority process when a core product vulnerability hits the news.
4 min read
XZ Utils backdoor: what ops should check
CVE-2024-3094 hit rolling Linux distros hard. Here is what happened, who was exposed, and the checks SMB teams should run.