#flaw


Critical BlockStrap flaw lets hackers run code on Magento servers

Oct 17, 2026 // 00:57

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on […]

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Oct 15, 2026 // 23:36

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app (richdocumentscode) for Nextcloud. […]

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Oct 15, 2026 // 12:37

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. The […]

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

Oct 14, 2026 // 16:37

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since […]

Ghostscript flaw lets hackers hijack servers via PDF uploads

Oct 14, 2026 // 00:36

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. The flaw […]

Docker Hub flaw let attackers impersonate users, tamper with images

Oct 13, 2026 // 18:36

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT). Docker […]

SAP warns of maximum severity OAuth2 SSRF security flaw

Oct 13, 2026 // 16:56

SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. […]

Max severity SonicWall SMA1000 flaw now exploited in attacks

Oct 9, 2026 // 15:36

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. Tracked as CVE-2026-102255, the flaw affects […]

Citrix warns admins to patch new NetScaler RCE flaw immediately

Oct 9, 2026 // 11:37

Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access […]

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

Oct 7, 2026 // 19:24

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company’s network and applications. The […]

1 2 3 … 60 Next