vulnerability

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

CISA, Cisco, CVE, Don't miss, firewall, Hot stuff, News, Palo Alto Networks, vulnerability /

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products 2026-10-15 at 13:43 By Sinisa Markovic The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS CVE-2026-76519, […]

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products Read More »

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Cisco, email security, exploited, Featured, Vulnerabilities, vulnerability /

Cisco Warns of Exploited Secure Email Gateway Vulnerability 2026-10-15 at 09:34 By Ionut Arghire Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Warns of Exploited Secure Email Gateway Vulnerability Read More »

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws

vulnerability, vulnerability management /

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws 2026-10-14 at 17:05 By Ashish Khaitan This Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report covers two views of risk: what attackers tried against Cyble’s global honeypot sensors, and what the Cybersecurity and Infrastructure Security Agency (CISA) disclosed for industrial control systems (ICS). […]

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws Read More »

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

browser, Chrome, Firefox, Firefox Enterprise, Google, Mozilla, patches, Vulnerabilities, vulnerability /

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise 2026-10-14 at 10:38 By Ionut Arghire Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise Read More »

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Citrix, Fortinet, Ivanti, patches, Vulnerabilities, vulnerability /

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products 2026-10-14 at 10:26 By Ionut Arghire Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products Read More »

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities

patches, SAP, Vulnerabilities, vulnerability /

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities 2026-10-14 at 09:12 By Ionut Arghire The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities Read More »

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

exploited, Featured, Ivanti, Vulnerabilities, vulnerability, Zero-Day /

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN 2026-10-13 at 21:43 By Eduard Kovacs CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.  The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek. This article is […]

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN Read More »

Adobe Patches 140 Vulnerabilities Across 10 Products

Adobe, patch, Vulnerabilities, vulnerability /

Adobe Patches 140 Vulnerabilities Across 10 Products 2026-10-13 at 20:14 By Eduard Kovacs The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge. The post Adobe Patches 140 Vulnerabilities Across 10 Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Patches 140 Vulnerabilities Across 10 Products Read More »

Google Partially Reverses Chrome Bug Bounty Cuts

bug bounty program, Chrome, VRP, Vulnerabilities, vulnerability /

Google Partially Reverses Chrome Bug Bounty Cuts 2026-10-13 at 20:00 By Eduard Kovacs Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.  The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Partially Reverses Chrome Bug Bounty Cuts Read More »

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)

CVE, Don't miss, GitLab, Hot stuff, News, vulnerability /

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) 2026-10-13 at 12:19 By Sinisa Markovic GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97229 is an integer overflow vulnerability in […]

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) Read More »

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild

exploited, Vulnerabilities, vulnerability, WordPress /

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild 2026-10-12 at 16:14 By Eduard Kovacs The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites. The post Bricksforge WordPress Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild Read More »

Critical SonicWall Vulnerability Exploited Days After Disclosure

exploited, Featured, SonicWall, Vulnerabilities, vulnerability /

Critical SonicWall Vulnerability Exploited Days After Disclosure 2026-10-12 at 11:36 By Ionut Arghire CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical SonicWall Vulnerability Exploited Days After Disclosure Read More »

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring

CVE, Don't miss, Hot stuff, News, NVIDIA, vulnerability /

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring 2026-10-09 at 16:27 By Sinisa Markovic Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets unauthenticated attackers crash the monitoring service and may disrupt AI workloads, according to Lava. Lava reported the flaw to […]

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring Read More »

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

AhsayCBS, Vulnerabilities, vulnerability /

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild 2026-10-09 at 13:23 By Ionut Arghire The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild Read More »

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

Citrix, NetScaler, patch, Vulnerabilities, vulnerability /

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability 2026-10-09 at 09:53 By Ionut Arghire The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service. The post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability Read More »

Cisco Patches a Dozen Critical Vulnerabilities

Cisco, patches, Vulnerabilities, vulnerability /

Cisco Patches a Dozen Critical Vulnerabilities 2026-10-08 at 18:28 By Ionut Arghire The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution. The post Cisco Patches a Dozen Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches a Dozen Critical Vulnerabilities Read More »

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

Atlassian, exploited, Featured, Vulnerabilities, vulnerability /

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication 2026-10-08 at 17:04 By Eduard Kovacs Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products. The post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication Read More »

SonicWall and Splunk Patch Critical Vulnerabilities

patch, SonicWall, Splunk, Vulnerabilities, vulnerability /

SonicWall and Splunk Patch Critical Vulnerabilities 2026-10-08 at 15:37 By Ionut Arghire Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall and Splunk Patch Critical Vulnerabilities Read More »

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)

Atlassian, Atlassian Confluence, Atlassian Jira, CVE, Don't miss, exploit, Hot stuff, News, Previdian, vulnerability, WatchTowr /

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) 2026-10-07 at 17:21 By Zeljka Zorz One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers published a technical rundown of the flaw, attackers have been spotted attempting to […]

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) Read More »

Chrome 155 Update Patches 247 Vulnerabilities

Chrome, Vulnerabilities, vulnerability /

Chrome 155 Update Patches 247 Vulnerabilities 2026-10-07 at 13:51 By Ionut Arghire Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track. The post Chrome 155 Update Patches 247 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome 155 Update Patches 247 Vulnerabilities Read More »

Scroll to Top