-
Apache disclosed eight vulnerabilities in Tomcat, including authentication bypass, cross-user data exposure, insecure socket access, and cryptographic configuration failures. Of these, three are rated Important, and five are rated Low. Fixes are availa…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0. This warning, published on October 20, 2026, advises administrators to prepare for immediate upgrades. Additionally,…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ransomware operators are exploiting a vulnerability in Palo Alto Networks PAN-OS that allows them to bypass authentication. This issue enables unauthorized VPN sessions, bypasses multifactor authentication (MFA), and allows access to corporate networks…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Rank Math has reported a security incident involving malware distributed through Rank Math PRO version 3.0.123. They warn that WordPress websites using this compromised plugin are at risk if administrators activated it. The company has removed the affe…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are exploiting a command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite. This vulnerability allows attackers to compromise internet-facing email servers without any user interaction. Microsoft Threat Intelligence has…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single malicious DFS referral response. This vulnerability, tracked as CVE-2026-70111, affects Windows Server vers…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October 13, 2026, this desktop update resolves weaknesses across various browser components, including gr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections under various access conditions. Microsoft is the assigning authority, with a release date of October …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
