Vulnerabilities
53 stories · RSS feed for this view
Are Freezers Being Hacked? Europe and the U.S. Military Investigate.
A wave of disruptions at grocery stores, which some officials blame on cyberattacks, highlights the vulnerability of supply chains. Shops across Europe were affected again on Monday.
If hackers can take control of a supermarket freezer, how vulnerable is other tech?
Dozens of shops across European countries have been hit by a cyber-attack affecting their fridges.
Vulnerabilities in Request Tracker and RT for Incident Response software
During its own research, CERT Polska has found 3 XSS vulnerabilities (from CVE-2026-105454 to CVE-2026-105456) in Request Tracker (RT) and RT for Incident Response software (RTIR).
Vulnerabilities in Płatnik software
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-110970 to CVE-2026-110972) found in Płatnik software.
Vulnerabilities in ARKETEAM Protectel software
CERT Polska has received a report about 5 vulnerabilities (from CVE-2025-68391 to CVE-2025-68395) found in ARKETEAM Protectel software.
NCSC – CERT-SE veckobrev v.44
I veckans brev kan du läsa om att den norska nationella säkerhetsmyndigheten (NSM) höjer den nationella cyberrisknivån till hög. Du hittar även information om att sårbarheterna i PHP har lagts till i CISA:s KEV-katalog.
Vulnerabilities in Zimbra Collaboration software
During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.
Vulnerabilities in Szafir software
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-93570, CVE-2026-93571 and CVE-2026-106036) found in Szafir software.
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.
Kritisk sårbarhet i Google Brotli
En kritisk sårbarhet i Google Brotli har publicerats. Sårbarheten CVE-2026-111497 har fått en CVSS-klassning på 9.2, och möjliggör för en oautentiserad angripare på distans att orsaka överbelastning av system eller…
Vulnerability in Wing FTP Server software
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.
Vulnerability in KGS Software tia Viewer software
Stored Cross-Site Scripting vulnerability (CVE-2026-105987) has been found in KGS Software tia Viewer software.
Vulnerabilities in twofactor_gauthenticator plugin for Roundcube
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-107145 to CVE-2026-107147) found in twofactor_gauthenticator plugin for Roundcube.
EU makes progress towards PHP patching, UK lags behind
Five days into the PHP2Shell incident, and patch rates are creeping upwards, but the majority of publicly visible PHP hosts remain exposed
Vulnerabilities in boneIO products
CERT Polska has received a report about 11 vulnerabilities (from CVE-2026-77052 to CVE-2026-77062) found in boneIO products.
2026-018: Critical Vulnerabilities in PHP
On 20 October 2026, the PHP project announced an upcoming security release addressing two critical vulnerabilities in PHP. Public reports indicated that these vulnerabilities could lead to remote code execution (RCE)…
CERT-SE:s veckobrev v.43
I veckans brev kan du läsa om de två kritiska sårbarheterna i programmeringsspråket PHP, som används av en mängd webbplatser över hela världen. CERT-SE gick ut med ett blixtmeddelande om detta på onsdagen. Du hittar…
Vulnerabilities in CGM CLININET software
CERT Polska has received a report about 11 vulnerabilities (CVE-2025-30043 and from CVE-2025-30045 to CVE-2025-30047, from CVE-2025-30049 to CVE-2025-30054 and CVE-2025-58403) found in CGM CLININET software.
Vulnerability in MTW CleanShot X software
Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.
The internet has broken – again. Shouldn’t the tech firms that make billions from it pay to fix it? | Chris Stokel-Walker
I’ve been banging the drum about these vulnerabilities for years. It will take more than a handful of exhausted developers to keep us safeParts of the internet are going dark. In the Netherlands, government websites…
Kritisk sårbarhet i GitLab CE och EE
Gitlab har publicerat säkerhetsuppdateringar för en ny sårbarhet, CVE-2026-110264. Sårbarheten har fått en CVSS-klassning på 10.0 och kan utnyttjas av en oautentiserad användare för att köra godtycklig kod. [1][2]…
2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU…
Flaw in PHP computer language leads to shutdown of websites around world
Precautionary takedowns come as experts say bad actors could exploit vulnerability in language used by 70% of sitesWebsites around the globe have gone dark after a serious vulnerability was found in a computer language…
BM26-003 Kritiska sårbarheter i PHP
PHP.net har publicerat säkerhetsuppdateringar för de två sårbarheterna CVE-2026-109618 och CVE-2026-109619, och rekommenderar att uppdatera till versionerna PHP 8.5.12, 8.4.27, 8.3.36 eller 8.2.35. [1] Sårbarheterna har…
BeyondTrust varnar för kritisk nolldagssårbarhet
BeyondTrust har publicerat information om en allvarlig nolldagssårbarhet i BeyondTrust Remote Support. Sårbarheten CVE-2026-102764 har fått en CVSS-klassning på 9.3, och kan utnyttjas för att skriva kod till systemet…
Vulnerability in NordVPN software
Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.
Vulnerability in Sparx Systems Enterprise Architect software
Improper restriction of XML external entity reference vulnerability (CVE-2026-88794) has been found in Sparx Systems Enterprise Architect software.
Vulnerabilities in Slican telephone exchanges
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35088, CVE-2026-63314 and CVE-2026-63315) found in Slican telephone exchanges.
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
On 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an…