NewIntroducing ISO360 — our all-in-one ISO compliance platform
Cybersecurity · Compliance · Cyber Risk Advisory
NewIntroducing ISO360 — ISO compliance platform

Cybersecurity, Compliance & Risk Advisory for the Digital Age

R4IM helps organizations strengthen security, achieve ISO compliance, manage cyber risk, and respond faster to emerging vulnerabilities — through practical, business-focused advisory services.

Trusted across
ISO 27001ISO 22301ITSM / ISO 20000VA / PTCloud SecurityGRC AdvisoryUAE Experience
Free Cyber Advisory Intelligence

Know what's exploited today. Act before it hits you.

Stay informed about critical vulnerabilities, actively exploited CVEs, vendor advisories, and emerging cyber risks. R4IM continuously monitors trusted public sources and simplifies the actions organizations should take.

MediumCVE-2026-19383
Vulnerability advisory

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1.

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product is published by multiple vendors.

Updated Aug 10Remediation
TrackedCVE-2026-3298
Vulnerability advisory

The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buf…

The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.

Updated Aug 10Remediation
HighCVE-2026-3087
python · python

If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the arc…

If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.

Updated Aug 10Remediation
LowCVE-2026-19382
Vulnerability advisory

A weakness has been identified in Almico Speedfan 4.52.

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Updated Aug 10Remediation
HighCVE-2026-19381
Vulnerability advisory

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0.

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Updated Aug 10Remediation
LowCVE-2026-19380
Vulnerability advisory

A vulnerability was identified in Mullvad wireguard.sys 0.10.1.

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

Updated Aug 10Remediation
New Product

Meet ISO360

The all-in-one platform to plan, implement, and sustain ISO compliance.

Built by R4IM consultants for security, quality, and business continuity teams. ISO360 streamlines controls, evidence, risk, audits, and continual improvement across ISO 27001, ISO 22301, ISO 20000, and more — in one workspace.

  • Multi-standard control library
  • Evidence & document management
  • Risk register & treatment plans
  • Internal audits & CAPAs
  • Real-time compliance dashboards
  • Team collaboration & workflows
ISO360 · Live workspace
Online
Controls
128 / 156
Open risks
7
ISO 27001 readiness82%
ISO 22301 readiness68%
ISO 20000 readiness54%
Powered by R4IM · iso360.r4im.com
Why R4IM

Practical advisory.
Audit-ready outcomes.

We work shoulder-to-shoulder with your teams to close compliance gaps, reduce cyber risk, and build security programs your auditors and your board can both trust. Two decades of UAE and global experience across ISO, cybersecurity, cloud, and GRC.

20+
Years of advisory experience
150+
Engagements delivered
ISO
27001 · 22301 · 20000 practice
UAE
Local presence, global reach
Talk to a Consultant

Get a clear next step on your cyber & compliance roadmap.

A senior R4IM advisor will reply within one business day. UAE-based teams available for on-site engagements across the region.