Router and Remote Access Vulnerabilities: Immediate Actions for UK SMBs

This episode examines ten newly disclosed and actively exploited vulnerabilities affecting router and remote access infrastructure commonly deployed in UK small business networks. Host Corrine Jefferson walks through six CVEs added to CISA’s Known Exploited Vulnerabilities catalogue between 10 and 11 September 2026, including critical flaws in ConnectWise ScreenConnect and MikroTik RouterOS, plus four new critical-severity Totolink router vulnerabilities published to the NIST National Vulnerability Database. The episode explains supply chain risk through managed service provider remote access tools, the specific threat posed by compromised network perimeter devices, and provides five actionable steps businesses can take before week’s end. Corrine offers practical guidance on holding IT providers accountable, understanding buffer overflow exploits, and building a documented patch verification process. The briefing is aimed at business owners and decision-makers who need to understand why infrastructure vulnerabilities demand immediate attention, particularly when public exploit code is already circulating.

Chapters

• Introduction Corrine introduces the episode’s focus on confirmed exploits targeting routers and remote access infrastructure commonly found in UK small business networks.
• What CISA’s KEV List Actually Means Explanation of the Known Exploited Vulnerabilities catalogue as a verified threat indicator, covering the six CVEs added between 10 and 11 September 2026 and the distinction between theoretical vulnerabilities and confirmed active exploitation.
• ConnectWise ScreenConnect: The Supply Chain Risk in Your Network Analysis of CVE-2026-86060 in ConnectWise ScreenConnect, the remote access tool widely used by UK managed service providers, and the supply chain implications when MSP infrastructure is compromised.
• Call to Action Corrine encourages listeners to follow the show, leave reviews, and share the episode with business owners who rely on managed service providers.
• MikroTik RouterOS: When Your Router Is the Threat Coverage of CVE-2026-85706 and related MikroTik RouterOS vulnerabilities now on the KEV catalogue, explaining why a compromised router poses unique visibility challenges for standard security tooling.
• Four New Totolink CVEs: A Different Router Problem Breakdown of CVE-2026-90605 through CVE-2026-90608, four critical buffer overflow vulnerabilities affecting the Totolink A3002MU router, with public exploit code already available.
• What Your MSP Should Be Telling You Guidance on reasonable expectations for managed service provider communication during active exploitation events, and how to frame accountability questions professionally.
• The Competitive Edge in Paying Attention Discussion of how active threat intelligence monitoring differentiates businesses in procurement scenarios and supports robust security posture beyond baseline compliance.
• What to Do Before Friday Five specific, actionable steps: identify remote access tools, audit routers, request patch logs, bookmark the KEV catalogue, and document all provider communications.
• Closing Corrine summarises the episode’s core message and reinforces the urgency of verifying infrastructure patch status before the end of the week.

Links

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog