-
A public proof-of-concept (PoC) exploit has been released for CVE-2026-59346, a critical integer overflow flaw in VMware Workstation and Fusion that could enable a privileged attacker inside a virtual machine to execute code on the underlying host. Bro…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Splunk has addressed a critical vulnerability in Splunk Enterprise that allows unauthenticated attackers to execute operating system commands through the Patroni REST API on a search head cluster member. This issue, tracked as CVE-2026-76268, has a CVS…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Progress has disclosed a critical command injection vulnerability in the Early Access Release of its DataDirect Autonomous REST Connector AI Model Generator agents. This vulnerability, tracked as CVE-2026-91140, allows specially crafted OpenAPI or Swag…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenSSH released version 10.6 on October 6, 2026, to address security vulnerabilities that affect encrypted sessions, file transfers, authentication, and forwarding controls. This update mitigates a plaintext recovery attack that exploits shared compre…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Elastic published 14 security advisories addressing various vulnerabilities in Elasticsearch, Kibana, and Elastic Agent/Endpoint. Among these, a high-severity Kibana authorization bypass vulnerability allows for cross-tenant data interception. Other is…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Veeam released security updates to address a critical vulnerability that lets low-privileged users execute remote code on Veeam Backup Servers. Identified as CVE-2025-64393, this flaw has a CVSS v4.0 score of 9.4 and was resolved in Veeam Backup & …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical vulnerability exists in WatchGuard endpoint security products that could allow a local, authenticated attacker to bypass driver authentication and access sensitive kernel and process memory. This vulnerability is tracked as CVE-2026-13043 an…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Atlassian has announced a critical vulnerability related to arbitrary file access that affects Jira Software Data Center and Confluence Data Center. This vulnerability, tracked as CVE-2026-21589, has a CVSS score of 9.3 and allows unauthenticated attac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
