247 stories · RSS feed for this view
View CSAF Summary Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated…
View CSAF Summary Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to…
'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-93570, CVE-2026-93571 and CVE-2026-106036) found in Szafir software.
Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.
Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain…
The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.
Serial number: AV26-763Date: July 30, 2026Updated: October 28, 2026 As of July 30, 2026, VMware is affected by vulnerabilities in the following products: Cloud Foundation 5.x 9.0.x.x 9.1.x.x Prior to 5.2.3 ESX Prior to…
Serial number: AV26-1101Date: October 28, 2026 As of October 28, 2026, Juniper Networks is affected by vulnerabilities in the following products: Session Smart Conductor Prior to 7.0.5 Prior to 7.1.7 Prior to 7.2.3…
Serial number: AV26-1100Date: October 28, 2026 As of October 27, 2026, Mozilla is affected by vulnerabilities in the following products: Firefox Prior to 159 Firefox ESR Prior to 115.44 Prior to 153.6 Thunderbird Prior…
Serial number: AV26-1099Date: October 28, 2026 As of October 26, 2026, Apple is affected by vulnerabilities in the following products: iOS and iPadOS Prior to 18.7.11 Prior to 26.7.2 Prior to 27.2 MacOS (Golden…
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems…
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems…
Serial number: AV26-1098Date: October 28, 2026 As of October 28, 2026, Progress is affected by a vulnerability in the following product: Telerik Document Processing Libraries Prior to 2026.3.1027 The Cyber Centre…
Serial Number: AV26-1071Date: October 20, 2026Updated: October 28, 2026 As of October 20, 2026, Oracle Corporation is affected by vulnerabilities in the following products: Helidon JD Edwards EnterpriseOne Configurator…
Serial number: AV26-1097Date: October 28, 2026 As of October 27, 2026, Tanium is affected by vulnerabilities in the following products: Certificate Manager Prior to 1.17.417 Prior to 1.18.368 Prior to 1.22.119 Endpoint…
Serial number: AV26-1096Date: October 28, 2026 As of October 27, 2026, Veeam is affected by vulnerabilities in the following products: Veeam Agent for Linux Prior to 13.1.2 Veeam Backup and Replication Prior to 13.0.3…
Serial number: AV26-1095Date: October 28, 2026 As of October 27, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 156.0.8078.73/.74 (Windows/Mac)…
Serial number: AV26-1094Date: October 28, 2026 As of October 27, 2026, WatchGuard is affected by vulnerabilities in the following products: Fireware OS Multiple versions Mobile VPN with SSL Client Prior to 2026.4 Prior…
Serial number: AV26-1093Date: October 28, 2026 As of October 27, 2026, TeamViewer is affected by vulnerabilities in the following products: TeamViewer Full Client & Host (Windows) Prior to 15.83 TeamViewer Full Client &…
Serial number: AV26-1092Date: October 28, 2026 As of October 27, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Substance 3D Painter Prior to or equal to 12.1.5 Creative Cloud Desktop…
Number: AL26-027Date: October 28, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300…
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.
A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and which generated more noise than real danger?
Serial number: AV26–697Date: July 14, 2026Updated: October 27, 2026 On July 14, 2026, Adobe published security advisories to address critical vulnerabilities in the following products: Adobe After Effects - version…
Serial number: AV26-1085Date: October 26, 2026Updated: October 27, 2026 As of October 22, 2026, Google is affected by a vulnerability in the following product: Brotli Versions 1.0.3 to versions prior to v1.0.10 Versions…
We hear from Ondřej Surý, the programmer whose PHP patches helped avert a cyber crisis.
Critical flaw in EDK2 allows attackers to execute code early in the boot process.
Number: AL26-026Date: October 21, 2026Updated: October 27, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that…
