R-Vision Identifies Four Critical Vulnerabilities Threatening Corporate Infrastructure

In September 2026, R-Vision analysts identified 13 trending vulnerabilities, highlighting four as particularly dangerous for corporate infrastructure. These include flaws in Windows Kerberos, the Windows ALPC mechanism, Zimbra Collaboration Suite, and GitLab.

Three of these vulnerabilities—ALPC, Zimbra, and GitLab—are already being actively exploited in real-world attacks and are included in the CISA Known Exploited Vulnerabilities (KEV) catalog. The Windows Kerberos flaw is not yet exploited but is categorized by Microsoft as 'Exploitation More Likely'.

The ALPC vulnerability (CVE-2026-85880) allows privilege escalation to SYSTEM and is used in the BlueMoon exploit chain. The Zimbra flaw (CVE-2026-73570) enables remote code execution via the zimbra-snmp component, while the GitLab issue (CVE-2026-85706) allows unauthorized reading of arbitrary files.

R-Vision experts emphasize that timely updates are critical for protection. Given the complexity of modern IT environments, the company recommends using Vulnerability Management solutions to automate the detection, prioritization, and remediation of security threats.