vulnerability

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

Don't miss, enterprise, Hot stuff, MSP, News, security update, SonicWall, vulnerability /

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) 2026-10-07 at 13:37 By Zeljka Zorz SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their behalf and reach internal functionality […]

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) Read More »

Android’s October 2026 Updates Patch 25 Vulnerabilities

Android, Featured, Mobile & Wireless, patch, Vulnerabilities, vulnerability /

Android’s October 2026 Updates Patch 25 Vulnerabilities 2026-10-07 at 09:55 By Ionut Arghire The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation. The post Android’s October 2026 Updates Patch 25 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Android’s October 2026 Updates Patch 25 Vulnerabilities Read More »

Atlassian Patches Critical Vulnerability Affecting 8 Products

Atlassian, patches, Vulnerabilities, vulnerability /

Atlassian Patches Critical Vulnerability Affecting 8 Products 2026-10-07 at 09:37 By Ionut Arghire Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory. The post Atlassian Patches Critical Vulnerability Affecting 8 Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Atlassian Patches Critical Vulnerability Affecting 8 Products Read More »

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI 

exploited, Rejetto, Vulnerabilities, vulnerability /

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  2026-10-05 at 14:00 By Ionut Arghire CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  Read More »

Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)

Don't miss, Hot stuff, Microsoft Exchange, News, security update, vulnerability /

Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940) 2026-10-05 at 13:38 By Zeljka Zorz Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and attachments of other users in the same organization, but “does not allow access […]

Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940) Read More »

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Citrix, exploited, Featured, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier 2026-10-05 at 08:14 By Eduard Kovacs Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched. The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first on SecurityWeek. This article is an […]

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier Read More »

Fortra Patches Critical Vulnerabilities in BoKS

BoKS, Fortra, patches, Vulnerabilities, vulnerability /

Fortra Patches Critical Vulnerabilities in BoKS 2026-10-03 at 14:34 By Ionut Arghire The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fortra Patches Critical Vulnerabilities in BoKS Read More »

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

0-day, Fortinet, Hot stuff, News, vulnerability /

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286) 2026-10-02 at 11:50 By Sinisa Markovic Fortinet is warning customers that attackers are exploiting a zero-day vulnerability (CVE-2026-104286) in FortiMail, its email security gateway. Fortinet says the flaw has been reported to be exploited in the wild, and urges customers to apply the workaround it shared until […]

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286) Read More »

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

exploited, Vulnerabilities, vulnerability, Zimbra /

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure 2026-10-01 at 15:55 By Ionut Arghire Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction. The post Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure Read More »

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

AI, analysis, Artificial Intelligence, Google, report, Vulnerabilities, vulnerability /

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery 2026-09-30 at 17:05 By Eduard Kovacs Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution. The post Google: AI Is Changing the Pace and Profile of Vulnerability Discovery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery Read More »

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability

Vulnerabilities, vulnerability, WatchGuard /

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability 2026-09-30 at 16:16 By Ionut Arghire WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS. The post WatchGuard Patches Critical Fireware OS Code Injection Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability Read More »

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks

Citrix, exploited, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks 2026-09-30 at 15:48 By Eduard Kovacs Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772. The post Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks Read More »

Chrome, Firefox Updates Patch Over 100 Vulnerabilities

Chrome, Firefox, patches, Vulnerabilities, vulnerability /

Chrome, Firefox Updates Patch Over 100 Vulnerabilities 2026-09-30 at 15:16 By Ionut Arghire Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox. The post Chrome, Firefox Updates Patch Over 100 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome, Firefox Updates Patch Over 100 Vulnerabilities Read More »

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised

breach, Don't miss, Hot stuff, JFrog, News, open source, OpenInfra, vulnerability /

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised 2026-09-30 at 13:39 By Zeljka Zorz Attackers have compromised a self-hosted JFrog Artifactory instance operated by OpenInfra Europe, the regional hub of the OpenInfra Foundation warned in a security notice prominently displayed on its homepage. OpenInfra Europe’s security incident notice “Anyone who downloaded or installed artifacts […]

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised Read More »

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL

OpenSSL, patches, Vulnerabilities, vulnerability, WolfSSL /

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL 2026-09-30 at 09:55 By Eduard Kovacs Roughly a dozen vulnerabilities have been patched in each of the open source cryptographic libraries.  The post High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL Read More »

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

Censys, CERT-EU, Don't miss, GreyNoise, Hot stuff, Lupovis, NetScaler, News, PoC, vulnerability, WatchTowr /

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771) 2026-09-29 at 17:59 By Zeljka Zorz The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day exploits has now become widespread “spray and pray” exploitation, fueled by the publication of a root-cause analysis and a proof-of-concept exploit […]

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771) Read More »

GitHub’s AI agent found 24 Android app vulnerabilities

agentic AI, AI, Android, GitHub, News, vulnerability /

GitHub’s AI agent found 24 Android app vulnerabilities 2026-09-29 at 09:39 By Anamarija Pogorelec GitHub Security Lab researcher Kevin Stubbings built custom AI-driven audit workflows, called taskflows, on top of the lab’s open source Taskflow Agent, and used them to find and report more than 20 vulnerabilities in Android apps. Two of the disclosed bugs […]

GitHub’s AI agent found 24 Android app vulnerabilities Read More »

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

cybercrime, Oracle PeopleSoft, ShinyHunters, Vulnerabilities, vulnerability /

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign 2026-09-28 at 13:56 By Ionut Arghire The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The post Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign Read More »

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability

alert, Kiteworks, Malware & Threats, Vulnerabilities, vulnerability /

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability 2026-09-28 at 12:44 By Ionut Arghire The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised. The post Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability Read More »

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

Citrix, exploited, Featured, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug 2026-09-28 at 10:29 By Eduard Kovacs Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772. The post Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug Read More »

Scroll to Top