NGINX, WordPress, SonicWall RCEs under active exploitation; patched versions released

Executive Summary: This briefing describes multiple high-severity threats — a patched NGINX heap buffer overflow (CVE-2026-42533), public exploits for WordPress 'wp2shell' RCEs, actively exploited SonicWall SMA 1000 zero-days (chained by Inc ransomware), an OpenSSL 'HollowByte' memory-exhaustion flaw, and a Russian-attributed UAC-0145 ClickFix campaign delivering data-stealing malware — and urges immediate patching, log review, isolation of vulnerable appliances, and heightened detection efforts.