Vulnerabilities

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

exploited, firewall, Palo Alto Networks, PAN-OS, Vulnerabilities, Zero-Day /

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution 2026-10-15 at 09:59 By Eduard Kovacs The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek. This article is an […]

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution Read More »

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Cisco, email security, exploited, Featured, Vulnerabilities, vulnerability /

Cisco Warns of Exploited Secure Email Gateway Vulnerability 2026-10-15 at 09:34 By Ionut Arghire Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Warns of Exploited Secure Email Gateway Vulnerability Read More »

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

browser, Chrome, Firefox, Firefox Enterprise, Google, Mozilla, patches, Vulnerabilities, vulnerability /

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise 2026-10-14 at 10:38 By Ionut Arghire Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise Read More »

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Citrix, Fortinet, Ivanti, patches, Vulnerabilities, vulnerability /

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products 2026-10-14 at 10:26 By Ionut Arghire Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products Read More »

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

exploited, Featured, Microsoft, MotW, Patch Tuesday, Vulnerabilities, Windows, Zero-Day /

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day 2026-10-14 at 10:16 By Eduard Kovacs The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek. This article is an excerpt from […]

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day Read More »

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities

patches, SAP, Vulnerabilities, vulnerability /

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities 2026-10-14 at 09:12 By Ionut Arghire The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities Read More »

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

exploited, Featured, Ivanti, Vulnerabilities, vulnerability, Zero-Day /

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN 2026-10-13 at 21:43 By Eduard Kovacs CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.  The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek. This article is […]

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN Read More »

Adobe Patches 140 Vulnerabilities Across 10 Products

Adobe, patch, Vulnerabilities, vulnerability /

Adobe Patches 140 Vulnerabilities Across 10 Products 2026-10-13 at 20:14 By Eduard Kovacs The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge. The post Adobe Patches 140 Vulnerabilities Across 10 Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Patches 140 Vulnerabilities Across 10 Products Read More »

Google Partially Reverses Chrome Bug Bounty Cuts

bug bounty program, Chrome, VRP, Vulnerabilities, vulnerability /

Google Partially Reverses Chrome Bug Bounty Cuts 2026-10-13 at 20:00 By Eduard Kovacs Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.  The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Partially Reverses Chrome Bug Bounty Cuts Read More »

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild

exploited, Vulnerabilities, vulnerability, WordPress /

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild 2026-10-12 at 16:14 By Eduard Kovacs The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites. The post Bricksforge WordPress Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild Read More »

Critical SonicWall Vulnerability Exploited Days After Disclosure

exploited, Featured, SonicWall, Vulnerabilities, vulnerability /

Critical SonicWall Vulnerability Exploited Days After Disclosure 2026-10-12 at 11:36 By Ionut Arghire CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical SonicWall Vulnerability Exploited Days After Disclosure Read More »

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

AhsayCBS, Vulnerabilities, vulnerability /

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild 2026-10-09 at 13:23 By Ionut Arghire The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild Read More »

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

Citrix, NetScaler, patch, Vulnerabilities, vulnerability /

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability 2026-10-09 at 09:53 By Ionut Arghire The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service. The post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability Read More »

Cisco Patches a Dozen Critical Vulnerabilities

Cisco, patches, Vulnerabilities, vulnerability /

Cisco Patches a Dozen Critical Vulnerabilities 2026-10-08 at 18:28 By Ionut Arghire The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution. The post Cisco Patches a Dozen Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches a Dozen Critical Vulnerabilities Read More »

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

Atlassian, exploited, Featured, Vulnerabilities, vulnerability /

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication 2026-10-08 at 17:04 By Eduard Kovacs Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products. The post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication Read More »

SonicWall and Splunk Patch Critical Vulnerabilities

patch, SonicWall, Splunk, Vulnerabilities, vulnerability /

SonicWall and Splunk Patch Critical Vulnerabilities 2026-10-08 at 15:37 By Ionut Arghire Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall and Splunk Patch Critical Vulnerabilities Read More »

Chrome 155 Update Patches 247 Vulnerabilities

Chrome, Vulnerabilities, vulnerability /

Chrome 155 Update Patches 247 Vulnerabilities 2026-10-07 at 13:51 By Ionut Arghire Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track. The post Chrome 155 Update Patches 247 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome 155 Update Patches 247 Vulnerabilities Read More »

Android’s October 2026 Updates Patch 25 Vulnerabilities

Android, Featured, Mobile & Wireless, patch, Vulnerabilities, vulnerability /

Android’s October 2026 Updates Patch 25 Vulnerabilities 2026-10-07 at 09:55 By Ionut Arghire The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation. The post Android’s October 2026 Updates Patch 25 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Android’s October 2026 Updates Patch 25 Vulnerabilities Read More »

Atlassian Patches Critical Vulnerability Affecting 8 Products

Atlassian, patches, Vulnerabilities, vulnerability /

Atlassian Patches Critical Vulnerability Affecting 8 Products 2026-10-07 at 09:37 By Ionut Arghire Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory. The post Atlassian Patches Critical Vulnerability Affecting 8 Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Atlassian Patches Critical Vulnerability Affecting 8 Products Read More »

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

AI, Artificial Intelligence, bug bounty program, Google, open source, OSS, VRP, Vulnerabilities /

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports 2026-10-05 at 17:26 By Eduard Kovacs Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP). The post Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports appeared first on SecurityWeek. This […]

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports Read More »

Scroll to Top