Vulnerabilities
Vulnerability in KAMSOFT ZSIRep CLIENT library
Improper Certificate Validation vulnerability (CVE-2026-113618) has been found in KAMSOFT ZSIRep CLIENT library.
Vulnerabilities
61 stories · RSS feed for this view
Vulnerabilities
Inyección SQL en SIREC de Atmira
Inyección SQL en SIREC de Atmira Vie, 06/11/2026 - 09:26 Aviso Recursos Afectados SIREC de Atmira. Versiones afectadas no especificadas. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de severidad…
Vulnerabilities
Múltiples vulnerabilidades en MatchPoint de TPC Software
Múltiples vulnerabilidades en MatchPoint de TPC Software Jue, 05/11/2026 - 10:16 Aviso Recursos Afectados Plataforma MatchPoint. Descripción INCIBE ha coordinado la comunicación de siete vulnerabilidades: 3 de severidad…
Vulnerabilities
Múltiples vulnerabilidades en AuthPoint Gateway de WatchGuard
Múltiples vulnerabilidades en AuthPoint Gateway de WatchGuard Jue, 05/11/2026 - 09:24 Aviso Recursos Afectados AuthPoint Authentication Gateway, versiones desde 1.0 y anteriores a 7.6.0.CVE-2026-121639: afecta a…
Vulnerabilities
Múltiples vulnerabilidades en Coupa Total Spend Management Platform de Coupa
Múltiples vulnerabilidades en Coupa Total Spend Management Platform de Coupa Mié, 04/11/2026 - 09:44 Aviso Recursos Afectados Coupa Total Spend Management Platform. Descripción INCIBE ha coordinado la publicación de…
Vulnerabilities
Uso de memoria previamente liberada en productos de WatchGuard
Uso de memoria previamente liberada en productos de WatchGuard Mié, 04/11/2026 - 09:25 Aviso Recursos Afectados WatchGuard identifica como potencialmente afectados los siguientes productos que incorporan versiones…
Vulnerabilities
Múltiples vulnerabilidades en GMS de SonicWall
Múltiples vulnerabilidades en GMS de SonicWall Mié, 04/11/2026 - 09:25 Aviso Recursos Afectados SonicWall Global Management System (GMS), tanto Virtual Appliance como Windows, versiones 9.5.2 y anteriores. Descripción…
Vulnerabilities
Múltiples vulnerabilidades en Dameware de SolarWinds
Múltiples vulnerabilidades en Dameware de SolarWinds Mié, 04/11/2026 - 09:25 Aviso Recursos Afectados SolarWinds Dameware 2026.3 y versiones anteriores. Descripción Luiz Felipe Mol (Confu53) y Greg Bernatowicz, del…
Vulnerabilities
Múltiples vulnerabilidades en Fabric Composer de HPE
Múltiples vulnerabilidades en Fabric Composer de HPE Mié, 04/11/2026 - 09:25 Aviso Recursos Afectados HPE Networking Fabric Composer 7.4.0.HPE Networking Fabric Composer, versiones 7.0.0 a 7.3.4.Las versiones fuera de…
Vulnerabilities
Uso de memoria después de liberarla en productos de Red Hat
Uso de memoria después de liberarla en productos de Red Hat Mar, 03/11/2026 - 11:48 Aviso Recursos Afectados Red Hat Enterprise Linux 8, 9 y 10 con un núcleo vulnerable y comunicaciones TCP/IPv4 habilitadas.Red Hat…
Vulnerabilities
Are Freezers Being Hacked? Europe and the U.S. Military Investigate.
A wave of disruptions at grocery stores, which some officials blame on cyberattacks, highlights the vulnerability of supply chains. Shops across Europe were affected again on Monday.
Vulnerabilities
If hackers can take control of a supermarket freezer, how vulnerable is other tech?
Dozens of shops across European countries have been hit by a cyber-attack affecting their fridges.
Vulnerabilities
Vulnerabilities in Request Tracker and RT for Incident Response software
During its own research, CERT Polska has found 3 XSS vulnerabilities (from CVE-2026-105454 to CVE-2026-105456) in Request Tracker (RT) and RT for Incident Response software (RTIR).
Vulnerabilities
Vulnerabilities in Płatnik software
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-110970 to CVE-2026-110972) found in Płatnik software.
Vulnerabilities
Vulnerabilities in ARKETEAM Protectel software
CERT Polska has received a report about 5 vulnerabilities (from CVE-2025-68391 to CVE-2025-68395) found in ARKETEAM Protectel software.
Vulnerabilities
Vulnerabilities in Zimbra Collaboration software
During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.
Vulnerabilities
Vulnerabilities in Szafir software
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-93570, CVE-2026-93571 and CVE-2026-106036) found in Szafir software.
Vulnerabilities
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.
Vulnerabilities
Vulnerability in Wing FTP Server software
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.
Vulnerabilities
Vulnerability in KGS Software tia Viewer software
Stored Cross-Site Scripting vulnerability (CVE-2026-105987) has been found in KGS Software tia Viewer software.
Vulnerabilities
Vulnerabilities in twofactor_gauthenticator plugin for Roundcube
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-107145 to CVE-2026-107147) found in twofactor_gauthenticator plugin for Roundcube.
Vulnerabilities
EU makes progress towards PHP patching, UK lags behind
Five days into the PHP2Shell incident, and patch rates are creeping upwards, but the majority of publicly visible PHP hosts remain exposed
Vulnerabilities
Vulnerabilities in boneIO products
CERT Polska has received a report about 11 vulnerabilities (from CVE-2026-77052 to CVE-2026-77062) found in boneIO products.
Vulnerabilities
2026-018: Critical Vulnerabilities in PHP
On 20 October 2026, the PHP project announced an upcoming security release addressing two critical vulnerabilities in PHP. Public reports indicated that these vulnerabilities could lead to remote code execution (RCE)…
Vulnerabilities
Vulnerabilities in CGM CLININET software
CERT Polska has received a report about 11 vulnerabilities (CVE-2025-30043 and from CVE-2025-30045 to CVE-2025-30047, from CVE-2025-30049 to CVE-2025-30054 and CVE-2025-58403) found in CGM CLININET software.
Vulnerabilities
Node.js corrige fallos graves de TLS y Brotli en sus ramas 26, 24 y 22
Node.js publicó el 21 de octubre de 2026 versiones de seguridad para 26.x, 24.x y 22.x. El lote corrige vulnerabilidades de severidad alta que afectan a la validación TLS y al decodificador Brotli, además de actualizar…
Vulnerabilities
Vulnerability in MTW CleanShot X software
Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.
Opinion
The internet has broken – again. Shouldn’t the tech firms that make billions from it pay to fix it? | Chris Stokel-Walker
I’ve been banging the drum about these vulnerabilities for years. It will take more than a handful of exhausted developers to keep us safeParts of the internet are going dark. In the Netherlands, government websites…
Vulnerabilities
2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU…